Skip to contentMicrofocus vulnerabilities
Newest
- micro focus microfocus real user monitoring, microfocus real user monitoring +1 moreMFSBGN03827 rev.1 - Microfocus Real User Monitoring 9.4.0 BPRDownload Java Deserialization VulnerabilityCVE-2018-185896.3 Medium
- microfocus enterprise developer, enterprise server, micro focus enterprise developer, micro focus enterprise server +2 moreIncorrect handling of an invalid value for an HTTP request parameter by Directory Server (aka...CVE-2018-124697.5 High
- micro focus arcsight management centerMFSBGN03824 rev.1 - ArcSight Management Center, Insufficient Access Control, Reflected Cross Site Scripting, Access Control vulnerability, Cross-Site Request Forgery (CSRF), Unauthenticated File Downl…CVE-2018-65048.8 High
- micro focus data center automation containerized suite, hybrid cloud management containerized suite, network operations management (nom) suite cdf +13 more +15 moreRemote Code Execution in the following products Hybrid Cloud Management Containerized Suite...CVE-2018-64997.1 High
- micro focus data center automation containerized suite, hybrid cloud management containerized suite, network operations management (nom) suite cdf +7 more +9 moreMicro Focus Container Deployment Foundation (CDF), Remote Code ExecutionCVE-2018-64988.8 High
- microfocus edirectory, micro focus netiq edirectory versions prior to 9.1.1 hf1 +1 moreUnvalidated redirect vulnerability in in NetIQ eDirectory before 9.1.1 HF1.CVE-2018-76926.1 Medium
- microfocus edirectory, micro focus edirectory (zdi) +1 moreInformation leakage vulnerability in NetIQ eDirectory before 9.1.1 HF1 due to shared memory usage.CVE-2018-76867.5 High
- micro focus groupwiseArbitrary File Upload in GroupWise Administration ConsoleCVE-2018-124689.1 Critical
- micro focus secure messaging gatewayRemote Code Execution in Micro Focus Secure Messaging GatewayCVE-2018-12465Public exploitEPSS 80.0%9.1 Critical
- micro focus secure messaging gatewayUnauthenticated SQL injection in Micro Focus Secure Messaging GatewayCVE-2018-12464Public exploitEPSS 80.7%10.0 Critical
- microfocus solutions business manager, micro focus solutions business manager 11.4 +1 moreMicro Focus Solutions Business Manager versions prior to 11.4 allows a user to invoke SBM RESTful...CVE-2018-76826.5 Medium
- microfocus solutions business manager, micro focus solutions business manager 11.4 +1 moreMicro Focus Solutions Business Manager versions prior to 11.4 might reveal certain sensitive...CVE-2018-76837.5 High
- microfocus solutions business manager, micro focus solutions business manager 11.4 +1 moreMicro Focus Solutions Business Manager versions prior to 11.4 allows JavaScript to be embedded in...CVE-2018-76814.8 Medium
- microfocus solutions business manager, micro focus solutions business manager 11.4 +1 moreMicro Focus Solutions Business Manager versions prior to 11.4 can reflect back HTTP header values.CVE-2018-76806.1 Medium
- microfocus solutions business manager, micro focus solutions business manager 11.4 +1 moreMicro Focus Solutions Business Manager versions prior to 11.4 when ASP.NET is configured with...CVE-2018-76799.8 Critical
- micro focus cms server, universal cmdb server, microfocus universal cmbd server +2 moreMFSBGN03810 rev.1 - Universal CMDB, Deserialization Java Objects and CSRFCVE-2018-64977.5 High
- micro focus ucmdb browser, microfocus universal cmbd browser +1 moreMFSBGN03809 rev.1 - Universal CMDB, Deserialization Java Objects and CSRFCVE-2018-64967.5 High
- micro focus ucmdb, ucmdb browser, microfocus universal cmdb +3 more +5 moreMFSBGN03808 rev.1 - Micro Focus UCMDB, Cross-Site ScriptingCVE-2018-64956.3 Medium
- micro focus hp service manager software, microfocus service manager +1 moreMFSBGN03807 rev.1 - HP Service Manager Software, Multiple VulnerabilitiesCVE-2018-64946.4 Medium
- microfocus client, micro focus client for open enterprise server +1 moreClient for OES Elevation of Privilege via Buffer OverflowCVE-2018-76877.8 High
- micro focus universal cmdb, microfocus ucmdb configuration manager +1 moreMFSBGN03803 rev.1 - UCMDB, Installation File Access Control Privilege Escalation VulnerabilityCVE-2018-64918.1 High
- microfocus sentinelPotential Information Disclosure in SentinelCVE-2018-76752.8 Low
- edirectoryLogin restrictions not applied when using ebaclient against NetIQ eDirectory EBA interfaceCVE-2017-92855.4 Medium
- edirectoryFix for NetIQ shell code uploadCVE-2017-74298.8 High
- microfocus project and portfolio management centerXML External Entity (XXE) vulnerability in Micro Focus Project and Portfolio Management Center,...CVE-2018-64899.8 Critical
- micro focus universal cmdb, microfocus ucmdb configuration manager +1 moreMFSBGN03798 rev.1 - Micro Focus Universal CMDB, Apache Struts InstanceCVE-2018-64888.1 High
- micro focus universal cmdb foundation softwareMFSBGN03799 rev.1 - Micro Focus UCMDB, Remote Disclosure of InformationCVE-2018-64879.8 Critical
- hewlett packard enterprise project and portfolio management (ppm), microfocus project and portfolio management +1 moreA Remote Cross-Site Scripting vulnerability in HPE Project and Portfolio Management (PPM) version...CVE-2017-89935.4 Medium
- micro focus fortify audit workbench (awb) and micro focus fortify software security center (ssc), microfocus fortify audit workbench, fortify software security center +2 moreMFSBGN03797 rev.1 - Micro Focus Fortify Audit Workbench (AWB) and Micro Focus Fortify Software Security Center (SSC), XML External Entity InjectionCVE-2018-64867.3 High
- micro focus operations manager iMFSBGN03795 rev.1 - Micro Focus Operations Manager i - Remote Cross-Site Scripting (XSS)CVE-2017-143635.9 Medium
- micro focus project and portfolio management center, microfocus project and portfolio management +1 moreMFSBGN03793 rev.1 - Project and Portfolio Management Center, Multiple vulnerabilitiesCVE-2017-143627.3 High
- micro focus project and portfolio management center, microfocus project and portfolio management +1 moreMFSBGN03793 rev.1 - Project and Portfolio Management Center, Multiple vulnerabilitiesCVE-2017-143617.4 High
- microfocus connected backupA potential security vulnerability has been identified in HPE Connected Backup versions 8.6 and 8...CVE-2017-14355Public exploit7.8 High
- microfocus bi-directional driver, *** n/a *** idm 4.5 bidirectional edir driver version +1 moreThe Bi-directional driver in IDM 4.5 before 4.0.3.0 could be susceptible to unauthorized log...CVE-2017-92735.3 Medium
- microfocus bi-directional driver, *** n/a *** idm 4.5 bidirectional edir driver version +1 moreThe Bi-directional driver in IDM 4.5 before 4.0.3.0 could be susceptible to a denial of service...CVE-2017-92727.5 High
- micro focus visibrokerAn out-of-bounds read (CWE-125) vulnerability exists in Micro Focus VisiBroker 8.5. The...CVE-2017-92839.8 Critical
- micro focus visibrokerAn integer overflow (CWE-190) led to an out-of-bounds write (CWE-787) on a heap-allocated area,...CVE-2017-92829.8 Critical
- microfocus visibrokerAn integer overflow (CWE-190) potentially causing an out-of-bounds read (CWE-125) vulnerability...CVE-2017-92817.5 High
- microfocus enterprise developer, enterprise server, micro focus enterprise developer, micro focus enterprise server +2 moreA Path Traversal (CWE-22) vulnerability in esfadmingui in Micro Focus Enterprise Developer and...CVE-2017-74246.5 Medium
- microfocus enterprise developer, enterprise server, micro focus enterprise developer, micro focus enterprise server +2 moreA Cross-Site Request Forgery (CWE-352) vulnerability in esfadmingui in Micro Focus Enterprise...CVE-2017-74238.8 High
- microfocus enterprise developer, enterprise server, micro focus enterprise developer, micro focus enterprise server +2 moreReflected and stored Cross-Site Scripting (XSS, CWE-79) vulnerabilities in esfadmingui in Micro...CVE-2017-74225.4 Medium
- microfocus directory server, enterprise developer, enterprise server +2 more +4 moreReflected and stored Cross-Site Scripting (XSS, CWE-79) vulnerabilities in Directory Server (aka...CVE-2017-74216.1 Medium
- microfocus enterprise developer, enterprise server, enterprise server monitor and control +1 more +3 moreAn Authentication Bypass (CWE-287) vulnerability in ESMAC (aka Enterprise Server Monitor and...CVE-2017-74209.8 Critical
- microfocus directory server, enterprise developer, enterprise server +2 more +4 moreA Cross-Site Request Forgery (CWE-352) vulnerability in Directory Server (aka Enterprise Server...CVE-2017-51878.8 High
- microfocus sentinelA vulnerability was discovered in NetIQ Sentinel Server 8.0 before 8.0.1 that may allow remote...CVE-2017-51857.5 High
- microfocus sentinelA vulnerability was discovered in NetIQ Sentinel Server 8.0 before 8.0.1 that may allow leakage...CVE-2017-51845.3 Medium
- microfocus host access management and security server, reflection for the web, reflection security gateway +1 more +3 moreAdministrative Server in Micro Focus Host Access Management and Security Server (MSS) and...CVE-2016-57656.5 Medium
- micro focus rumba 9.4, microfocus rumba +1 moreStack buffer overflow in the send.exe and receive.exe components of Micro Focus Rumba 9.4 and...CVE-2016-91769.8 Critical
- microfocus rumba ftpMicro Focus Rumba FTP 4.X client buffer overflow makes it possible to corrupt the stack and allow...CVE-2016-5764Public exploit8.8 High
- microfocus rumbaStack-based buffer overflow in the PlayMacro function in ObjectXMacro.ObjectXMacro in WdMacCtl...CVE-2016-5228Public exploitEPSS 15.1%9.8 Critical
- Show moreLoading…