Skip to contentMicro Focus vulnerabilities
Newest
- micro focus hp service manager software, microfocus service manager +1 moreMFSBGN03807 rev.1 - HP Service Manager Software, Multiple VulnerabilitiesCVE-2018-64946.4 Medium
- microfocus client, micro focus client for open enterprise server +1 moreClient for OES Elevation of Privilege via Buffer OverflowCVE-2018-76877.8 High
- micro focus universal cmdb, microfocus ucmdb configuration manager +1 moreMFSBGN03803 rev.1 - UCMDB, Installation File Access Control Privilege Escalation VulnerabilityCVE-2018-64918.1 High
- micro focus netiq privileged account manager (pam) 3.1 and 3.2, netiq privileged account manager +1 morePAM exposure enabling unauthenticated access to remote hostCVE-2018-13439.8 Critical
- hp operations orchestration, micro focus operations orchestration software +1 moreMFSBGN03801 rev.1 - Micro Focus Operations Orchestration, Remote Denial of Service (DoS)CVE-2018-64905.9 Medium
- micro focus universal cmdb, microfocus ucmdb configuration manager +1 moreMFSBGN03798 rev.1 - Micro Focus Universal CMDB, Apache Struts InstanceCVE-2018-64888.1 High
- micro focus universal cmdb foundation softwareMFSBGN03799 rev.1 - Micro Focus UCMDB, Remote Disclosure of InformationCVE-2018-64879.8 Critical
- hewlett packard enterprise network automationA remote sql injection authentication bypass in HPE Network Automation version 9.1x, 9.2x, 10.0x,...CVE-2017-58149.8 Critical
- hewlett packard enterprise network automationA remote unauthenticated access vulnerability in HPE Network Automation version 9.1x, 9.2x, 10.0x...CVE-2017-58136.3 Medium
- hewlett packard enterprise network automationA remote sql information disclosure vulnerability in HPE Network Automation version 9.1x, 9.2x,...CVE-2017-58127.5 High
- hewlett packard enterprise network automationA remote code execution vulnerability in HPE Network Automation version 9.1x, 9.2x, 10.0x, 10.1x...CVE-2017-5811EPSS 17.0%7.5 High
- hewlett packard enterprise network automationA remote sql injection vulnerability in HPE Network Automation version 9.1x, 9.2x, 10.0x, 10.1x...CVE-2017-58109.8 Critical
- hewlett packard enterprise network automationA Remote Code Execution vulnerability in HPE Network Automation using RPCServlet and Java...CVE-2016-8511EPSS 15.3%9.8 Critical
- micro focus fortify audit workbench (awb) and micro focus fortify software security center (ssc), microfocus fortify audit workbench, fortify software security center +2 moreMFSBGN03797 rev.1 - Micro Focus Fortify Audit Workbench (AWB) and Micro Focus Fortify Software Security Center (SSC), XML External Entity InjectionCVE-2018-64867.3 High
- netiq access manager, micro focus netiq access manager, administrative console +1 moreA Vulnerability exists on Admin Console where an attacker can upload files to the Admin Console...CVE-2018-13429.8 Critical
- micro focus netiq access manager, netiq access manager +1 moreIn NetIQ Access Manager 4.3 and 4.4, a bug exists in Identity Server when accessing a basic SSO...CVE-2017-14803EPSS 34.6%9.8 Critical
- micro focus operations manager iMFSBGN03795 rev.1 - Micro Focus Operations Manager i - Remote Cross-Site Scripting (XSS)CVE-2017-143635.9 Medium
- micro focus project and portfolio management center, microfocus project and portfolio management +1 moreMFSBGN03793 rev.1 - Project and Portfolio Management Center, Multiple vulnerabilitiesCVE-2017-143627.3 High
- micro focus project and portfolio management center, microfocus project and portfolio management +1 moreMFSBGN03793 rev.1 - Project and Portfolio Management Center, Multiple vulnerabilitiesCVE-2017-143617.4 High
- hp content manager, micro focus hpe content manager workgroup service +1 moreMFSBGN03791 rev.1 - HPE Content Manager Workgroup Service, Denial of Service (DoS)CVE-2017-143605.9 Medium
- micro focus netiq imanager, netiq imanager +1 moreMultiple Reflected XSS in iManagerCVE-2017-74257.6 High
- hp performance center, micro focus hpe performance center +1 moreMFSBGN03788 rev.1 - HPE Performance Center, Remote Cross-Site Scripting (XSS)CVE-2017-143595.4 Medium
- micro focus hp arcsight esm, hp arcsight esm express, hp arcsight enterprise security manager +1 more +3 moreA URL redirection to untrusted site vulnerability in HP ArcSight ESM and HP ArcSight ESM Express,...CVE-2017-143586.1 Medium
- micro focus hp arcsight esm, hp arcsight esm express, hp arcsight enterprise security manager +1 more +3 moreA Reflected and Stored Cross-Site Scripting (XSS) vulnerability in HP ArcSight ESM and HP...CVE-2017-143576.1 Medium
- micro focus hp arcsight esm, hp arcsight esm express, hp arcsight enterprise security manager +1 more +3 moreAn SQL Injection vulnerability in HP ArcSight ESM and HP ArcSight ESM Express, in any 6.x version...CVE-2017-143569.8 Critical
- hp operations orchestration, micro focus hpe operations orchestration +1 moreA input validation vulnerability in HPE Operations Orchestration product all versions prior to 10...CVE-2017-89949.8 Critical
- hp application performance management, micro focus hpe application performance management (apm) +1 moreA potential security vulnerability has been identified in HPE Application Performance Management ...CVE-2017-143509.8 Critical
- micro focus visibrokerAn out-of-bounds read (CWE-125) vulnerability exists in Micro Focus VisiBroker 8.5. The...CVE-2017-92839.8 Critical
- micro focus visibrokerAn integer overflow (CWE-190) led to an out-of-bounds write (CWE-787) on a heap-allocated area,...CVE-2017-92829.8 Critical
- microfocus enterprise developer, enterprise server, micro focus enterprise developer, micro focus enterprise server +2 moreA Path Traversal (CWE-22) vulnerability in esfadmingui in Micro Focus Enterprise Developer and...CVE-2017-74246.5 Medium
- microfocus enterprise developer, enterprise server, micro focus enterprise developer, micro focus enterprise server +2 moreA Cross-Site Request Forgery (CWE-352) vulnerability in esfadmingui in Micro Focus Enterprise...CVE-2017-74238.8 High
- microfocus enterprise developer, enterprise server, micro focus enterprise developer, micro focus enterprise server +2 moreReflected and stored Cross-Site Scripting (XSS, CWE-79) vulnerabilities in esfadmingui in Micro...CVE-2017-74225.4 Medium
- microfocus directory server, enterprise developer, enterprise server +2 more +4 moreReflected and stored Cross-Site Scripting (XSS, CWE-79) vulnerabilities in Directory Server (aka...CVE-2017-74216.1 Medium
- microfocus enterprise developer, enterprise server, enterprise server monitor and control +1 more +3 moreAn Authentication Bypass (CWE-287) vulnerability in ESMAC (aka Enterprise Server Monitor and...CVE-2017-74209.8 Critical
- microfocus directory server, enterprise developer, enterprise server +2 more +4 moreA Cross-Site Request Forgery (CWE-352) vulnerability in Directory Server (aka Enterprise Server...CVE-2017-51878.8 High
- micro focus opensuseCode injection in openSUSE when running some source services used in the open build service 2.1...CVE-2011-04699.8 Critical
- micro focus vibeAn absolute path traversal vulnerability (CWE-36) in Micro Focus Vibe 4.0.2 and earlier allows a...CVE-2017-74336.5 Medium
- netiq access manager, micro focus netiq imanager +1 moreThe certificate upload feature in iManager in NetIQ Access Manager 4.1 before 4.1.2 Hot Fix 1 and...CVE-2016-57508.8 High
- micro focus rumba 9.4, microfocus rumba +1 moreStack buffer overflow in the send.exe and receive.exe components of Micro Focus Rumba 9.4 and...CVE-2016-91769.8 Critical