Vulnerability in Micro Focus Cobol Server
CVE-2023-32265
A potential security vulnerability has been identified in the Enterprise Server Common Web Administration (ESCWA) component used in Enterprise Server, Enterprise Test Server, Enterprise Developer, Visual COBOL, and COBOL Server. An attack…
EPSS: 0.004 (30.5th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 7.1 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N.
Affected products
- Micro Focus Cobol Server — versions 6.0, 7.0, 8.0
- Micro Focus Enterprise Developer — versions 6.0, 7.0, 8.0
- Micro Focus Enterprise Server — versions 6.0, 7.0, 8.0
- Micro Focus Enterprise Test Server — versions 6.0, 7.0, 8.0
- Micro Focus Visual Cobol — versions 6.0, 7.0, 8.0
- Microfocus Cobol_server — versions 6.0, 7.0, 8.0
- Microfocus Enterprise_developer — versions 6.0, 7.0, 8.0
- Microfocus Enterprise_server — versions 6.0, 7.0, 8.0
- Microfocus Enterprise_test_server — versions 6.0, 7.0, 8.0
- Microfocus Visual_cobol — versions 6.0, 7.0, 8.0
References
- security@opentext.com (Vendor Advisory)
Frequently asked questions
- What is CVE-2023-32265?
- CVE-2023-32265 is a high-severity vulnerability in Micro Focus Cobol Server. CVSS score: 7.1/10. Published 2023-07-20.
- How severe is CVE-2023-32265?
- High severity. CVSS v3 base score is 7.1 out of 10.