Microfocus vulnerabilities

Products

• Imanager 22
• Access Manager 18
• Solutions Business Manager 17
• Edirectory 16
• Service Manager 16
• Enterprise Developer 12
• Enterprise Server 12
• Netiq Advanced Authentication 11
• Application Automation Tools 9
• Arcsight Logger 9
• Arcsight Management Center 9
• Arcsight Enterprise Security Manager 8
• Operations Agent 7
• Operations Bridge 7
• Filr 6
• Operations Bridge Manager 6
• Application Performance Management 5
• Netiq Access Manager 5
• Visibroker 5
• Fortify Software Security Center 4
• Netiq Self Service Password Reset 4
• Operation Bridge Reporter 4
• Sentinel 4
• Service Management Automation 4
• Verastream Host Integrator 4
• Content Manager 3
• Data Center Automation 3
• Data Protector 3
• Dimensions Cm 3
• Enterprise Server Monitor And Control 3
• Hybrid Cloud Management 3
• Identity Manager 3
• Network Operations Management 3
• Privileged User Manager 3
• Project And Portfolio Management 3
• Rumba 3
• Secure Messaging Gateway 3
• Acutoweb 2
• Bi-directional Driver 2
• Cms Server 2

Show 11 moreShow less

• Cobol Server 2
• Directory Server 2
• Enterprise Test Server 2
• Groupwise 2
• Netiq Privileged Access Manager 2
• Network Automation 2
• Self Service Password Reset 2
• Service Manager Automation 2
• Ucmdb Configuration Manager 2
• Visual Cobol 2
• Zenworks Configuration Management 2

Newest

• microfocus access manager Missing Authorization Vulnerability in OpenText Access Manager CVE-2026-11877 6.3 MediumJune 24, 2026
• microfocus access manager Reflected Cross-Site Scripting vulnerability in OpenText Access Manager CVE-2026-11878 8.2 HighJune 24, 2026
• microfocus operations agent Privilege escalation vulnerability in Operations Agent CVE-2026-2123 8.6 HighMarch 31, 2026
• microfocus imanager Possible Command injection Vulnerability in OpenText iManager CVE-2021-38116 8.8 HighNovember 22, 2024
• microfocus imanager Possible Remote Code Execution Vulnerability OpenText iManager CVE-2021-38117 8.8 HighNovember 22, 2024
• microfocus imanager Possible Local Privilege Escalation Vulnerability in OpenText iManager CVE-2021-38118 5.5 MediumNovember 22, 2024
• microfocus imanager Possible Reflected Cross-Site Scripting (XSS) Vulnerability in OpenText iManager CVE-2021-38119 6.1 MediumNovember 22, 2024
• microfocus imanager Possible Reflected and Stored XSS in OpenText iManager CVE-2021-38134 6.1 MediumNovember 22, 2024
• microfocus imanager Possible External service interaction Vulnerability in OpenText iManager CVE-2021-38135 8.6 HighNovember 22, 2024
• microfocus imanager Possible XSS in iManager URL for access Component CVE-2022-26324 7.6 HighNovember 22, 2024
• microfocus imanager Possible XML External Entity Injection in OpenText iManager CVE-2023-24466 7.5 HighNovember 22, 2024
• microfocus imanager Possible Command Injection in OpenText iManager CVE-2023-24467 8.8 HighNovember 22, 2024
• microfocus arcsight management center, arcsight platform +1 more OpenText ArcSight Management Center and ArcSight Platform Stored XSS CVE-2024-9841 7.0 HighNovember 8, 2024
• microfocus imanager Potential Cross Site Scripting vulnerability in OpenText iManager CVE-2020-11859 7.6 HighNovember 6, 2024
• microfocus operations agent A stored XSS vulnerability has been discovered on OpenText™ Operations Agent (OA). CVE-2024-5532 1.8 LowOctober 28, 2024
• microfocus application automation tools Multiple missing permission checks CVE-2024-4692 1.8 LowOctober 16, 2024
• microfocus application automation tools Insecure usage for DocumentBuilderFactory and TransformerFactory in OpenText Application Automation Tools CVE-2024-4690 5.1 MediumOctober 16, 2024
• microfocus application automation tools Multiple missing permission checks CVE-2024-4211 1.8 LowOctober 16, 2024
• microfocus application automation tools Multiple XXE sinks in Run LoadRunner script step in OpenText Application Automation Tools CVE-2024-4189 5.9 MediumOctober 16, 2024
• microfocus application automation tools Multiple XXE sinks in ALM archive post-build step in OpenText Application Automation Tools CVE-2024-4184 5.9 MediumOctober 16, 2024
• microfocus vertica Incorrect Permission Assignment for Critical Resource vulnerability has been discovered in OpenText™ Vertica. CVE-2024-6360 6.9 MediumOctober 2, 2024
• edirectory Improper Neutralization of Input During Web Page Generation Vulnerability CVE-2021-22503 5.4 MediumSeptember 12, 2024
• edirectory Possible NLDAP Denial of Service attack Vulnerability CVE-2021-22532 7.6 HighSeptember 12, 2024
• edirectory Possible Insertion of Sensitive Information into Log File Vulnerability CVE-2021-22533 6.5 MediumSeptember 12, 2024
• edirectory Cross-Site Scripting (XSS) Vulnerability CVE-2021-38131 5.4 MediumSeptember 12, 2024
• edirectory Possible External service interaction Vulnerability CVE-2021-38132 5.3 MediumSeptember 12, 2024
• edirectory Possible Improper authentication Vulnerability in OpenText eDirectory CVE-2021-38133 7.4 HighSeptember 12, 2024
• opentext netiq advance authentication, microfocus netiq advanced authentication +1 more Handling of sensitive data in process memory in NetIQ Advance Authentication CVE-2021-22509 8.1 HighAugust 28, 2024
• opentext netiq advance authentication, microfocus netiq advanced authentication +1 more Sensitive Data Exposure leaks potential information in NetIQ Advance Authentication CVE-2021-22529 6.3 MediumAugust 28, 2024
• opentext netiq advance authentication, microfocus netiq advanced authentication +1 more Improper account management vulnerability in NetIQ Advance Authentication CVE-2021-22530 8.2 HighAugust 28, 2024
• opentext netiq advance authentication, microfocus netiq advanced authentication +1 more Remote Code Execution using Bash command Injection in backup scheduling functionality in NetIQ Advance Authentication CVE-2021-38120 5.1 MediumAugust 28, 2024
• opentext netiq advance authentication, microfocus netiq advanced authentication +1 more Weak communication protocol identified in Advance Authentication client application CVE-2021-38121 8.3 HighAugust 28, 2024
• opentext netiq advance authentication, microfocus netiq advanced authentication +1 more Cross-Site Scripting (XSS) in Advance Authentication CVE-2021-38122 6.2 MediumAugust 28, 2024
• microfocus netiq access manager, netiq access manager +1 more Multiple xss vulnerability in NetIQ Access Manager CVE-2024-4554 7.3 HighAugust 28, 2024
• microfocus netiq access manager, netiq access manager +1 more User impersonation with MFA when configure in specific way CVE-2024-4555 7.7 HighAugust 28, 2024
• microfocus netiq access manager, netiq access manager +1 more Directory traversal vulnerability in NetIQ Access Manager CVE-2024-4556 5.7 MediumAugust 28, 2024
• microfocus acutoweb Cross Site Scripting vulnerability in AcuToWeb server v.10.5.0.7577C8b allows a remote attacker... CVE-2024-42852 6.1 MediumAugust 23, 2024
• opentext privileged access manager, microfocus netiq privileged access manager +1 more Vulnerability in sshrelay in privileged access manager provides full system access. CVE-2020-11847 8.2 HighAugust 21, 2024
• opentext privileged access manager, microfocus netiq privileged access manager +1 more Improper handling of token allows access to restricted resource in Privileged Access Manager CVE-2020-11846 8.7 HighAugust 21, 2024
• opentext self service password reset, microfocus netiq self service password reset +1 more Cross site scripting vulnerability in Self Service Password Reset CVE-2020-11850 7.3 HighAugust 21, 2024
• microfocus imanager Cross Site Request Forgery vulnerability in iManager CVE-2024-4429 5.4 MediumMay 28, 2024
• microfocus imanager XML External Entity injection vulnerability in iManager CVE-2024-3969 7.8 HighMay 28, 2024
• microfocus imanager File Upload vulnerability in unauthenticated session found in iManager. CVE-2024-3488 5.6 MediumMay 15, 2024
• microfocus imanager Broken Authentication vulnerability in iManager CVE-2024-3487 3.5 LowMay 15, 2024
• microfocus imanager XML External Entity injection vulnerability in iManager CVE-2024-3486 7.8 HighMay 15, 2024
• microfocus imanager Server-Side Request Forgery vulnerability in iManager CVE-2024-3485 5.3 MediumMay 15, 2024
• microfocus imanager Path Traversal vulnerability found in iManager CVE-2024-3484 5.7 MediumMay 15, 2024
• microfocus imanager Remote Code Execution vulnerability in the iManager CVE-2024-3483 7.8 HighMay 15, 2024
• microfocus imanager Remote Code Execution vulnerability in the iManager CVE-2024-3967 7.6 HighMay 15, 2024
• microfocus imanager Remote Code Execution vulnerability in the iManager CVE-2024-3968 7.8 HighMay 15, 2024
• Show olderLoading…