Micro Focus
Page 2 of 2 — Micro Focus CVEs from a corpus of 127, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2018-6490 | Medium | 5.9 | 2018-03-02 | Denial of Service vulnerability in Micro Focus Operations Orchestration Software, version 10.x. This vulnerability could be remotely exploited to allow Denial… |
CVE-2018-6488 | High | 8.1 | 2018-02-22 | Arbitrary Code Execution vulnerability in Micro Focus Universal CMDB, version 4.10, 4.11, 4.12. This vulnerability could be remotely exploited to allow Arbitra… |
CVE-2018-6487 | Critical | 9.8 | 2018-02-20 | Remote Disclosure of Information in Micro Focus Universal CMDB Foundation Software, version numbers 10.10, 10.11, 10.20, 10.21, 10.22, 10.30, 10.31, 4.10, 4.11… |
CVE-2018-6486 | High | 7.3 | 2018-02-02 | XML External Entity (XXE) vulnerability in Micro Focus Fortify Audit Workbench (AWB) and Micro Focus Fortify Software Security Center (SSC), versions 16.10, 16… |
CVE-2018-1342 | Critical | 9.8 | 2018-01-26 | A Vulnerability exists on Admin Console where an attacker can upload files to the Admin Console server, and potentially execute them. This impacts NetIQ Access… |
CVE-2017-14803 | Critical | 9.8 | 2018-01-20 | In NetIQ Access Manager 4.3 and 4.4, a bug exists in Identity Server when accessing a basic SSO connector and downloading the BasicSSO connector plugins on IE1… |
CVE-2017-14363 | Medium | 5.9 | 2017-12-21 | Cross-Site Scripting (XSS) vulnerability has been identified in Micro Focus Operations Manager i, versions 10.60, 10.61, 10.62. The vulnerability could be remo… |
CVE-2017-14362 | High | 7.3 | 2017-12-13 | Cross-Site Request Forgery vulnerability in Micro Focus Project and Portfolio Management Center, version 9.32. This vulnerability could be exploited to allow a… |
CVE-2017-14361 | High | 7.4 | 2017-12-13 | Man-In-The-Middle vulnerability in Micro Focus Project and Portfolio Management Center, version 9.32. This vulnerability could be exploited to allow a Man-in-t… |
CVE-2017-14360 | Medium | 5.9 | 2017-11-08 | A potential security vulnerability has been identified in HPE Content Manager Workgroup Service v9.00. The vulnerability could be remotely exploited to allow D… |
CVE-2017-14359 | Medium | 5.4 | 2017-11-03 | A potential security vulnerability has been identified in HPE Performance Center versions 12.20. The vulnerability could be remotely exploited to allow cross-s… |
CVE-2017-14358 | Medium | 6.1 | 2017-10-31 | A URL redirection to untrusted site vulnerability in HP ArcSight ESM and HP ArcSight ESM Express, in any 6.x version prior to 6.9.1c Patch 4 or 6.11.0 Patch 1… |
CVE-2017-14357 | Medium | 6.1 | 2017-10-31 | A Reflected and Stored Cross-Site Scripting (XSS) vulnerability in HP ArcSight ESM and HP ArcSight ESM Express, in any 6.x version prior to 6.9.1c Patch 4 or 6… |
CVE-2017-14356 | Critical | 9.8 | 2017-10-31 | An SQL Injection vulnerability in HP ArcSight ESM and HP ArcSight ESM Express, in any 6.x version prior to 6.9.1c Patch 4 or 6.11.0 Patch 1. This vulnerability… |
CVE-2017-8994 | Critical | 9.8 | 2017-10-10 | A input validation vulnerability in HPE Operations Orchestration product all versions prior to 10.80, allows for the execution of code remotely. |
CVE-2017-14350 | Critical | 9.8 | 2017-09-30 | A potential security vulnerability has been identified in HPE Application Performance Management (BSM) Platform versions 9.26, 9.30, 9.40. The vulnerability co… |
CVE-2017-9283 | Critical | 9.8 | 2017-09-21 | An out-of-bounds read (CWE-125) vulnerability exists in Micro Focus VisiBroker 8.5. The feasibility of leveraging this vulnerability for further attacks was no… |
CVE-2017-9282 | Critical | 9.8 | 2017-09-21 | An integer overflow (CWE-190) led to an out-of-bounds write (CWE-787) on a heap-allocated area, leading to heap corruption in Micro Focus VisiBroker 8.5. The f… |
CVE-2017-7424 | Medium | 6.5 | 2017-08-21 | A Path Traversal (CWE-22) vulnerability in esfadmingui in Micro Focus Enterprise Developer and Enterprise Server 2.3, 2.3 Update 1 before Hotfix 8, and 2.3 Upd… |
CVE-2017-7423 | High | 8.8 | 2017-08-21 | A Cross-Site Request Forgery (CWE-352) vulnerability in esfadmingui in Micro Focus Enterprise Developer and Enterprise Server 2.3, 2.3 Update 1 before Hotfix 8… |
CVE-2017-7422 | Medium | 5.4 | 2017-08-21 | Reflected and stored Cross-Site Scripting (XSS, CWE-79) vulnerabilities in esfadmingui in Micro Focus Enterprise Developer and Enterprise Server 2.3, 2.3 Updat… |
CVE-2017-7421 | Medium | 6.1 | 2017-08-21 | Reflected and stored Cross-Site Scripting (XSS, CWE-79) vulnerabilities in Directory Server (aka Enterprise Server Administration web UI) and ESMAC (aka Enterp… |
CVE-2017-7420 | Critical | 9.8 | 2017-08-21 | An Authentication Bypass (CWE-287) vulnerability in ESMAC (aka Enterprise Server Monitor and Control) in Micro Focus Enterprise Developer and Enterprise Server… |
CVE-2017-5187 | High | 8.8 | 2017-08-21 | A Cross-Site Request Forgery (CWE-352) vulnerability in Directory Server (aka Enterprise Server Administration web UI) in Micro Focus Enterprise Developer and… |
CVE-2011-0469 | Critical | 9.8 | 2017-08-17 | Code injection in openSUSE when running some source services used in the open build service 2.1 before March 11 2011. |
CVE-2017-7433 | Medium | 6.5 | 2017-05-18 | An absolute path traversal vulnerability (CWE-36) in Micro Focus Vibe 4.0.2 and earlier allows a remote authenticated attacker to download arbitrary files from… |
CVE-2016-9176 | Critical | 9.8 | 2016-11-04 | Stack buffer overflow in the send.exe and receive.exe components of Micro Focus Rumba 9.4 and earlier could be used by local attackers or attackers able to inj… |