Microfocus
Page 2 of 3 — Microfocus CVEs from a corpus of 273, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2021-22510 | Medium | 6.1 | 2021-04-08 | Reflected XSS vulnerability in Micro Focus Application Automation Tools Plugin - Jenkins plugin. The vulnerability affects all version 6.7 and earlier versions. |
CVE-2021-22507 | Critical | 9.8 | 2021-04-08 | Authentication bypass vulnerability in Micro Focus Operations Bridge Manager affects versions 2019.05, 2019.11, 2020.05 and 2020.10. The vulnerability could al… |
CVE-2021-22506 | High | 7.5 | 2021-03-26 | Advance configuration exposing Information Leakage vulnerability in Micro Focus Access Manager product, affects all versions prior to version 5.0. The vulnerab… |
CVE-2020-25840 | Medium | 6.1 | 2021-03-26 | Cross-Site scripting vulnerability in Micro Focus Access Manager product, affects all version prior to version 5.0. The vulnerability could cause configuration… |
CVE-2021-22496 | High | 7.5 | 2021-03-25 | Authentication Bypass Vulnerability in Micro Focus Access Manager Product, affects all version prior to version 4.5.3.3. The vulnerability could cause informat… |
CVE-2019-18947 | Low | 3.5 | 2021-02-26 | Micro Focus Solutions Business Manager Application Repository versions prior to 11.7.1 are vulnerable to information disclosure. |
CVE-2019-18946 | Medium | 4.8 | 2021-02-26 | Micro Focus Solutions Business Manager Application Repository versions prior to 11.7.1 are vulnerable to session fixation. |
CVE-2019-18945 | High | 7.3 | 2021-02-26 | Micro Focus Solutions Business Manager Application Repository versions prior to 11.7.1 are vulnerable to privilege escalation vulnerability. |
CVE-2019-18944 | Medium | 4.9 | 2021-02-26 | Micro Focus Solutions Business Manager Application Repository versions prior to 11.7.1 are vulnerable to reflected XSS. |
CVE-2019-18943 | Medium | 6.1 | 2021-02-26 | Micro Focus Solutions Business Manager versions prior to 11.7.1 are vulnerable to XML External Entity Processing (XXE) on certain operations. |
CVE-2019-18942 | Medium | 5.5 | 2021-02-26 | Micro Focus Solutions Business Manager versions prior to 11.7.1 are vulnerable to stored XSS. The application reflects previously stored user input without enc… |
CVE-2021-22504 | Critical | 9.8 | 2021-02-12 | Arbitrary code execution vulnerability on Micro Focus Operations Bridge Manager product, affecting versions 10.1x, 10.6x, 2018.05, 2018.11, 2019.05, 2019.11, 2… |
CVE-2021-22502 | Critical | 9.8 | 2021-02-08 | Remote Code execution vulnerability in Micro Focus Operation Bridge Reporter (OBR) product, affecting version 10.40. The vulnerability could be exploited to al… |
CVE-2021-22500 | Medium | 6.5 | 2021-02-06 | Cross Site Request Forgery vulnerability in Micro Focus Application Performance Management product, affecting versions 9.40, 9.50 and 9.51. The vulnerability c… |
CVE-2021-22499 | Medium | 4.8 | 2021-02-06 | Persistent Cross-Site scripting vulnerability in Micro Focus Application Performance Management product, affecting versions 9.40, 9.50 and 9.51. The vulnerabil… |
CVE-2021-22498 | High | 8.1 | 2021-01-19 | XML External Entity Injection vulnerability in Micro Focus Application Lifecycle Management (Previously known as Quality Center) product. The vulnerability aff… |
CVE-2020-25838 | Medium | 6.5 | 2020-12-11 | Unauthorized disclosure of sensitive information vulnerability in Micro Focus Filr product. Affecting all 3.x and 4.x versions. The vulnerability could be expl… |
CVE-2020-25839 | Critical | 9.8 | 2020-11-20 | NetIQ Identity Manager 4.8 prior to version 4.8 SP2 HF1 are affected by an injection vulnerability. This vulnerability is fixed in NetIQ IdM 4.8 SP2 HF1. |
CVE-2020-25833 | Medium | 4.8 | 2020-11-17 | Persistent cross-Site Scripting vulnerability on Micro Focus IDOL product, affecting all version prior to version 12.7. The vulnerability could be exploited to… |
CVE-2020-25832 | Medium | 5.4 | 2020-11-17 | Reflected Cross Site scripting vulnerability on Micro Focus Filr product, affecting version 4.2.1. The vulnerability could be exploited to perform Reflected XS… |
CVE-2020-11851 | Critical | 9.8 | 2020-11-17 | Arbitrary code execution vulnerability on Micro Focus ArcSight Logger product, affecting all version prior to 7.1.1. The vulnerability could be remotely exploi… |
CVE-2020-25834 | Medium | 5.4 | 2020-11-17 | Cross-Site Scripting vulnerability on Micro Focus ArcSight Logger product, affecting version 7.1. The vulnerability could be remotely exploited resulting in Cr… |
CVE-2020-11860 | Medium | 6.1 | 2020-11-17 | Cross-Site Scripting vulnerability on Micro Focus ArcSight Logger product, affecting all version prior to 7.1.1. The vulnerability could be remotely exploited… |
CVE-2020-25837 | High | 7.5 | 2020-11-05 | Sensitive information disclosure vulnerability in Micro Focus Self Service Password Reset (SSPR) product. The vulnerability affects versions 4.4.0.0 to 4.4.0.6… |
CVE-2020-11858 | High | 7.8 | 2020-10-27 | Code execution with escalated privileges vulnerability in Micro Focus products Operation Bridge Manager and Operation Bridge (containerized). The vulneravility… |
CVE-2020-11854 | Critical | 9.8 | 2020-10-27 | Arbitrary code execution vlnerability in Operation bridge Manager, Application Performance Management and Operations Bridge (containerized) vulnerability in Mi… |
CVE-2020-11853 | High | 8.8 | 2020-10-22 | Arbitrary code execution vulnerability affecting multiple Micro Focus products. 1.) Operation Bridge Manager affecting version: 2020.05, 2019.11, 2019.05, 2018… |
CVE-2020-11856 | Critical | 9.8 | 2020-09-22 | Arbitrary code execution vulnerability on Micro Focus Operation Bridge Reporter, affecting version 10.40 and earlier. The vulnerability could allow remote atta… |
CVE-2020-11857 | Critical | 9.8 | 2020-09-22 | An Authorization Bypass vulnerability on Micro Focus Operation Bridge Reporter, affecting version 10.40 and earlier. The vulnerability could allow remote attac… |
CVE-2020-11855 | High | 7.8 | 2020-09-22 | An Authorization Bypass vulnerability on Micro Focus Operation Bridge Reporter, affecting version 10.40 and earlier. The vulnerability could allow local attack… |
CVE-2020-11861 | High | 7.8 | 2020-09-18 | Unauthorized escalation of local privileges vulnerability on Micro Focus Operation Agent, affecting all versions prior to versions 12.11. The vulnerability cou… |
CVE-2020-11848 | High | 7.5 | 2020-08-19 | Denial of service vulnerability on Micro Focus ArcSight Management Center. Affecting all versions prior to version 2.9.5. The vulnerability could cause the ser… |
CVE-2020-11852 | High | 8.8 | 2020-08-07 | DKIM key management page vulnerability on Micro Focus Secure Messaging Gateway (SMG). Affecting all SMG Appliance running releases prior to July 2020. The vuln… |
CVE-2020-11849 | Critical | 9.8 | 2020-07-08 | Elevation of privilege and/or unauthorized access vulnerability in Micro Focus Identity Manager. Affecting versions prior to 4.7.3 and 4.8.1 hot fix 1. The vul… |
CVE-2020-9522 | Medium | 6.1 | 2020-06-16 | Cross Site Scripting (XSS) vulnerability in Micro Focus ArcSight Enterprise Security Manager (ESM) product, Affecting versions 7.0.x, 7.2 and 7.2.1 . The vulne… |
CVE-2020-11841 | Medium | 4.3 | 2020-06-16 | Unauthorized information disclosure vulnerability in Micro Focus ArcSight Management Center product, Affecting versions 2.6.1, 2.7.x, 2.8.x, 2.9.x prior to 2.9… |
CVE-2020-11840 | Medium | 4.3 | 2020-06-16 | Unauthorized information disclosure vulnerability in Micro Focus ArcSight Management Center product, Affecting versions 2.6.1, 2.7.x, 2.8.x, 2.9.x prior to 2.9… |
CVE-2020-11838 | Medium | 5.4 | 2020-06-16 | Cross Site Scripting (XSS) vulnerability in Micro Focus ArcSight Management Center product, Affecting versions 2.6.1, 2.7.x, 2.8.x, 2.9.x prior to 2.9.4. The v… |
CVE-2020-11839 | Medium | 6.1 | 2020-06-12 | Cross Site Scripting (XSS) vulnerability in Micro Focus ArcSight Logger product, affecting all version from 6.6.1 up to version 7.0.1. The vulnerabilities coul… |
CVE-2020-11844 | Critical | 10.0 | 2020-05-29 | Incorrect Authorization vulnerability in Micro Focus Container Deployment Foundation component affects products: - Hybrid Cloud Management. Versions 2018.05 to… |
CVE-2020-11845 | Medium | 6.1 | 2020-05-19 | Cross Site Scripting vulnerability in Micro Focus Service Manager product. Affecting versions 9.50, 9.51, 9.52, 9.60, 9.61, 9.62, 9.63. The vulnerability could… |
CVE-2020-9524 | Medium | 5.4 | 2020-05-18 | Cross Site scripting vulnerability on Micro Focus Enterprise Server and Enterprise developer, affecting all versions prior to version 5.0 Patch Update 8. The v… |
CVE-2020-11842 | High | 7.5 | 2020-05-04 | Information disclosure vulnerability in Micro Focus Verastream Host Integrator (VHI) product, affecting versions earlier than 7.8 Update 1 (7.8.49 or 7.8.0.49)… |
CVE-2020-9523 | High | 8.8 | 2020-04-17 | Insufficiently protected credentials vulnerability on Micro Focus enterprise developer and enterprise server, affecting all version prior to 4.0 Patch Update 1… |
CVE-2020-9521 | High | 8.8 | 2020-03-26 | An SQL injection vulnerability was discovered in Micro Focus Service Manager Automation (SMA), affecting versions 2019.08, 2019.05, 2019.02, 2018.08, 2018.05… |
CVE-2020-9520 | Medium | 5.4 | 2020-03-25 | A stored XSS vulnerability was discovered in Micro Focus Vibe, affecting all Vibe version prior to 4.0.7. The vulnerability could allows a remote attacker to c… |
CVE-2020-9518 | Medium | 5.3 | 2020-03-16 | Login filter can access configuration files vulnerability in Micro Focus Service Manager (Web Tier), affecting versions 9.50, 9.51, 9.52, 9.60, 9.61, 9.62. The… |
CVE-2020-9519 | Medium | 5.3 | 2020-03-16 | HTTP methods reveled in Web services vulnerability in Micro Focus Service manager (server), affecting versions 9.40, 9.41, 9.50, 9.51, 9.52, 9.60, 9.61, 9.62… |
CVE-2020-9517 | Medium | 5.4 | 2020-03-09 | There is an improper restriction of rendered UI layers or frames vulnerability in Micro Focus Service Manager Release Control versions 9.50 and 9.60. The vulne… |
CVE-2019-11657 | High | 8.8 | 2019-12-17 | Cross-Site Request Forgery vulnerability in all Micro Focus ArcSight Logger affecting all product versions below version 7.0. The vulnerability could be exploi… |
CVE-2019-17087 | High | 7.5 | 2019-12-11 | Unauthorized file download vulnerability in all supported versions of Micro Focus AcuToWeb. The vulnerability could be exploited to enumerate and download file… |
CVE-2019-17085 | Medium | 6.5 | 2019-11-18 | XXE attack vulnerability on Micro Focus Operations Agent, affected version 12.0, 12.01, 12.02, 12.03, 12.04, 12.05, 12.06, 12.10, 12.11. The vulnerability coul… |
CVE-2019-11674 | Medium | 5.9 | 2019-10-22 | Man-in-the-middle vulnerability in Micro Focus Self Service Password Reset, affecting all versions prior to 4.4.0.4. The vulnerability could exploit invalid ce… |
CVE-2019-11651 | Medium | 6.1 | 2019-10-02 | Reflected XSS on Micro Focus Enterprise Developer and Enterprise Server, all versions prior to version 3.0 Patch Update 20, version 4.0 Patch Update 12, and ve… |
CVE-2019-11664 | Medium | 6.5 | 2019-09-18 | Clear text password in browser in Micro Focus Service Manager product versions 9.30, 9.31, 9.32, 9.33, 9.34, 9.35, 9.40, 9.41, 9.50, 9.51, 9.52, 9.60, 9.61, 9… |
CVE-2019-11663 | Medium | 6.5 | 2019-09-18 | Clear text credentials are used to access managers app in Tomcat in Micro Focus Service Manager product versions 9.30, 9.31, 9.32, 9.33, 9.34, 9.35, 9.40, 9.41… |
CVE-2019-11662 | Medium | 4.3 | 2019-09-18 | Class and method names in error message in Micro Focus Service Manager product versions 9.30, 9.31, 9.32, 9.33, 9.34, 9.35, 9.40, 9.41, 9.50, 9.51, 9.52, 9.60… |
CVE-2019-11661 | High | 8.3 | 2019-09-18 | Allow changes to some table by non-SysAdmin in Micro Focus Service Manager product versions 9.30, 9.31, 9.32, 9.33, 9.34, 9.35, 9.40, 9.41, 9.50, 9.51, 9.52, 9… |
CVE-2019-11665 | High | 7.5 | 2019-09-17 | Data exposure in Micro Focus Service Manager product versions 9.30, 9.31, 9.32, 9.33, 9.34, 9.35, 9.40, 9.41, 9.50, 9.51, 9.52, 9.60, 9.61, 9.62. The vulnerabi… |
CVE-2019-11666 | High | 8.8 | 2019-09-17 | Insecure deserialization of untrusted data in Micro Focus Service Manager product versions 9.30, 9.31, 9.32, 9.33, 9.34, 9.35, 9.40, 9.41, 9.50, 9.51, 9.52, 9… |
CVE-2019-11667 | High | 7.5 | 2019-09-17 | Unauthorized access to contact information in Micro Focus Service Manager, versions 9.41, 9.50, 9.51, 9.52, 9.60, 9.61, 9.62. The vulnerability could be exploi… |
CVE-2019-11660 | High | 7.8 | 2019-09-13 | Privileges manipulation in Micro Focus Data Protector, versions 10.00, 10.01, 10.02, 10.03, 10.04, 10.10, 10.20, 10.30, 10.40. This vulnerability could be expl… |
CVE-2019-11669 | High | 7.5 | 2019-09-10 | Modifiable read only check box In Micro Focus Service Manager, versions 9.60p1, 9.61, 9.62. This vulnerability could be exploited to allow unauthorized modific… |
CVE-2019-11668 | High | 7.5 | 2019-09-10 | HTTP cookie in Micro Focus Service manager, Versions 9.30, 9.31, 9.32, 9.33, 9.34, 9.35, 9.40, 9.41, 9.50, 9.51, 9.52, 9.60, 9.61, 9.62. And Micro Focus Servic… |
CVE-2019-11658 | Medium | 4.3 | 2019-08-30 | Information exposure in Micro Focus Content Manager, versions 9.1, 9.2 and 9.3. This vulnerability when configured to use an Oracle database, allows valid syst… |
CVE-2019-11654 | High | 7.5 | 2019-08-23 | Path traversal vulnerability in Micro Focus Verastream Host Integrator (VHI), versions 7.7 SP2 and earlier, The vulnerability allows remote unauthenticated att… |
CVE-2019-11652 | Critical | 9.8 | 2019-08-14 | A potential authorization bypass issue was found in Micro Focus Self Service Password Reset (SSPR) versions prior to: 4.4.0.3, 4.3.0.6, and 4.2.0.6. Upgrade to… |
CVE-2019-11653 | Medium | 5.4 | 2019-08-07 | Remote Access Control Bypass in Micro Focus Content Manager. versions 9.1, 9.2, 9.3. The vulnerability could be exploited to manipulate data stored during anot… |
CVE-2019-11650 | Medium | 5.9 | 2019-07-10 | A potential Man in the Middle attack (MITM) was found in NetIQ Advanced Authentication Framework versions prior to 6.0. |
CVE-2019-11647 | Medium | 6.1 | 2019-06-24 | A potential XSS exists in Self Service Password Reset, in Micro Focus NetIQ Software all versions prior to version 4.4. The vulnerability could be exploited to… |
CVE-2019-11649 | Medium | 5.4 | 2019-06-19 | Cross-Site Scripting vulnerability in Micro Focus Fortify Software Security Center Server, versions 17.2, 18.1, 18.2, has been identified in Micro Focus Softwa… |
CVE-2019-3477 | Medium | 6.1 | 2019-06-07 | Micro Focus Solution Business Manager versions prior to 11.4.2 is susceptible to open redirect. |
CVE-2019-11646 | High | 8.8 | 2019-06-03 | Remote unauthorized command execution and unauthorized disclosure of information in Micro Focus Service Manager, versions 9.30, 9.31, 9.32, 9.33, 9.34, 9.35, 9… |
CVE-2016-1600 | High | 7.5 | 2019-05-09 | The ServiceNow driver in NetIQ Identity Manager versions prior to 4.6 are susceptible to an information disclosure vulnerability. |
CVE-2019-3490 | Medium | 6.1 | 2019-05-02 | A DOM based XSS vulnerability has been identified in the Netstorage component of Open Enterprise Server (OES) allowing a remote attacker to execute javascript… |
CVE-2019-3493 | High | 8.8 | 2019-04-29 | A potential security vulnerability has been identified in Micro Focus Network Automation Software 9.20, 9.21, 10.00, 10.10, 10.20, 10.30, 10.40, 10.50, 2018.05… |
CVE-2019-3489 | High | 7.5 | 2019-04-01 | An unauthenticated file upload vulnerability has been identified in the Web Client component of Micro Focus Content Manager 9.1, 9.2, and 9.3 when configured t… |
CVE-2018-19644 | Medium | 5.0 | 2019-03-27 | Reflected cross site script issue in Micro Focus Solutions Business Manager (SBM) (formerly Serena Business Manager (SBM)) versions prior to 11.5. |
CVE-2018-19643 | Medium | 4.7 | 2019-03-27 | Information leakage issue in Micro Focus Solutions Business Manager (SBM) (formerly Serena Business Manager (SBM)) versions prior to 11.5. |
CVE-2018-19642 | Medium | 5.1 | 2019-03-27 | Denial of service issue in Micro Focus Solutions Business Manager (SBM) (formerly Serena Business Manager (SBM)) versions prior to 11.5. |
CVE-2018-19641 | Medium | 6.1 | 2019-03-27 | Unauthenticated remote code execution issue in Micro Focus Solutions Business Manager (SBM) (formerly Serena Business Manager (SBM)) versions prior to 11.5. |
CVE-2019-3476 | Critical | 9.8 | 2019-03-25 | Remote arbitrary code execution in Micro Focus Data Protector, version 10.03 this vulnerability could allow remote arbitrary code execution. |
CVE-2016-9166 | High | 7.5 | 2019-03-21 | NetIQ eDirectory versions prior to 9.0.2, under some circumstances, could be susceptible to downgrade of communication security. |
CVE-2019-3475 | High | 7.8 | 2019-02-20 | A local privilege escalation vulnerability in the famtd component of Micro Focus Filr 3.0 allows a local attacker authenticated as a low privilege user to esca… |
CVE-2019-3474 | Medium | 6.5 | 2019-02-20 | A path traversal vulnerability in the web application component of Micro Focus Filr 3.x allows a remote attacker authenticated as a low privilege user to downl… |
CVE-2018-19645 | Critical | 9.8 | 2019-02-12 | An Authentication Bypass issue exists in Solutions Business Manager (SBM) (formerly Serena Business Manager (SBM)) versions prior to 11.5. |
CVE-2019-5736 | High | 8.6 | 2019-02-11 | runc through 1.0-rc6, as used in Docker before 18.09.2 and other products, allows attackers to overwrite the host runc binary (and consequently obtain host roo… |
CVE-2018-7691 | Medium | 6.5 | 2018-12-13 | A potential Remote Unauthorized Access in Micro Focus Fortify Software Security Center (SSC), versions 17.10, 17.20, 18.10 this exploitation could allow Remote… |
CVE-2018-7690 | Medium | 6.5 | 2018-12-13 | A potential Remote Unauthorized Access in Micro Focus Fortify Software Security Center (SSC), versions 17.10, 17.20, 18.10 this exploitation could allow Remote… |
CVE-2018-17952 | Medium | 6.1 | 2018-12-12 | Cross site scripting vulnerability in eDirectory prior to 9.1 SP2 |
CVE-2018-17950 | High | 7.5 | 2018-12-12 | Incorrect enforcement of authorization checks in eDirectory prior to 9.1 SP2 |
CVE-2018-17949 | Medium | 6.1 | 2018-12-12 | Cross site scripting vulnerability in iManager prior to 3.1 SP2. |
CVE-2009-5153 | Critical | 9.8 | 2018-11-21 | In Novell NetWare before 6.5 SP8, a stack buffer overflow in processing of CALLIT RPC calls in the NFS Portmapper daemon in PKERNEL.NLM allowed remote unauthen… |
CVE-2018-17948 | Medium | 6.1 | 2018-11-20 | An open redirect vulnerability exists in the Access Manager Identity Provider prior to 4.4 SP3. |
CVE-2018-12480 | Medium | 6.1 | 2018-11-15 | Mitigates an XSS issue in NetIQ Access Manager versions prior to 4.4 SP3. |
CVE-2018-18591 | Medium | 6.8 | 2018-11-13 | A potential unauthorized disclosure of data vulnerability has been identified in Micro Focus Service Manager versions: 9.30, 9.31, 9.32, 9.33, 9.34, 9.35, 9.40… |
CVE-2018-18590 | Critical | 9.6 | 2018-11-07 | A potential remote code execution and information disclosure vulnerability exists in Micro Focus Operations Bridge containerized suite versions 2017.11, 2018.0… |
CVE-2018-18589 | Medium | 6.3 | 2018-10-23 | A potential Remote Arbitrary Code Execution vulnerability has been identified in Micro Focus' Real User Monitoring software, versions 9.26IP, 9.30, 9.40 and 9… |
CVE-2018-12469 | High | 7.5 | 2018-10-12 | Incorrect handling of an invalid value for an HTTP request parameter by Directory Server (aka Enterprise Server Administration web UI) in Micro Focus Enterpris… |
CVE-2018-6504 | High | 8.8 | 2018-09-20 | A potential Cross-Site Request Forgery (CSRF) vulnerability has been identified in ArcSight Management Center (ArcMC) in all versions prior to 2.81. This vulne… |