What is CVE-2019-11666?

CVE-2019-11666 is a high-severity vulnerability in Micro Focus Service Manager, classified under Deserialization of Untrusted Data. CVSS score: 8.8/10. Published 2019-09-17.

How severe is CVE-2019-11666?

High severity. CVSS v3 base score is 8.8 out of 10.

Deserialization in Micro Focus Service Manager

CVE-2019-11666

Insecure deserialization of untrusted data in Micro Focus Service Manager product versions 9.30, 9.31, 9.32, 9.33, 9.34, 9.35, 9.40, 9.41, 9.50, 9.51, 9.52, 9.60, 9.61, 9.62. The vulnerability could be exploited to allow insecure deserialization of untrusted data.

Vulnerability class: Insecure Deserialization

EPSS: 0.012 (64.4th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 8.8 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H.

Affected products

Micro Focus Service Manager — versions 9.30, 9.31, 9.32
Microfocus Service_manager

Weakness classification (CWE)

CWE-502 — Deserialization of Untrusted Data

References

security@opentext.com (x_refsource_CONFIRM)

Frequently asked questions

What is CVE-2019-11666?: CVE-2019-11666 is a high-severity vulnerability in Micro Focus Service Manager, classified under Deserialization of Untrusted Data. CVSS score: 8.8/10. Published 2019-09-17.
How severe is CVE-2019-11666?: High severity. CVSS v3 base score is 8.8 out of 10.