Vulnerability in Micro Focus Service Manager

CVE-2019-11661

Allow changes to some table by non-SysAdmin in Micro Focus Service Manager product versions 9.30, 9.31, 9.32, 9.33, 9.34, 9.35, 9.40, 9.41, 9.50, 9.51, 9.52, 9.60, 9.61, 9.62. This vulnerability could be exploited to allow unauthorized access and modification of data.

EPSS: 0.010 (59.0th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 8.3 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L.

Affected products

References

Frequently asked questions

What is CVE-2019-11661?
CVE-2019-11661 is a high-severity vulnerability in Micro Focus Service Manager. CVSS score: 8.3/10. Published 2019-09-18.
How severe is CVE-2019-11661?
High severity. CVSS v3 base score is 8.3 out of 10.