CveMateVulnerability intelligence

Micro Focus vulnerabilities

127 vulnerabilities

Known vulnerabilities in Micro Focus products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 104 products.

Products

50 of 104

Service Manager8 vulnerabilities
Micro Focus Enterprise Developer, Micro Focus Enterprise Server7 vulnerabilities
Netiq Access Manager7 vulnerabilities
Solutions Business Manager7 vulnerabilities
Arcsight Management Center6 vulnerabilities
Solutions Business Manager 11.45 vulnerabilities
Arcsight Logger4 vulnerabilities
Solutions Business Manager (Sbm)4 vulnerabilities
Dimensions CM3 vulnerabilities
Filr3 vulnerabilities
HP Arcsight ESM3 vulnerabilities
HP Arcsight ESM Express3 vulnerabilities
Operation Bridge Manager3 vulnerabilities
Application Performance Management2 vulnerabilities
Content Manager2 vulnerabilities
Data Center Automation Containerized Suite2 vulnerabilities
Fortify Software Security Center (Ssc)2 vulnerabilities
Hybrid Cloud Management2 vulnerabilities
Hybrid Cloud Management Containerized Suite2 vulnerabilities
Micro Focus Arcsight Logger2 vulnerabilities
Micro Focus Netiq Self Service Password Reset.2 vulnerabilities
Micro Focus Visibroker2 vulnerabilities
Netiq Edirectory 9.1 SP22 vulnerabilities
Network Automation2 vulnerabilities
Network Operations Management (Nom) Suite CDF2 vulnerabilities
Network Operations Management Ultimate2 vulnerabilities
Operation Bridge (Containerized)2 vulnerabilities
Operations Bridge Containerized Suite2 vulnerabilities
Project And Portfolio Management Center2 vulnerabilities
Secure Messaging Gateway2 vulnerabilities
Service Management Automation Suite2 vulnerabilities
Ucmdb Browser2 vulnerabilities
Universal CMDB2 vulnerabilities
Advanced Authentication1 vulnerabilities
Arcsight ESM (When Arcsight Fusion1 vulnerabilities
Arcsight Interset1 vulnerabilities
Arcsight Investigate. Versions1 vulnerabilities
Arcsight Security Management Center1 vulnerabilities
Arcsight Transformation Hub1 vulnerabilities
Client For Open Enterprise Server1 vulnerabilities
CMS Server1 vulnerabilities
CMS Server 2018.051 vulnerabilities
Cobol Server1 vulnerabilities
Data Center Automation1 vulnerabilities
Data Center Automation Containerized1 vulnerabilities
Edirectory (Zdi)1 vulnerabilities
Enterprise Developer1 vulnerabilities
Enterprise Server1 vulnerabilities
Enterprise Test Server1 vulnerabilities
Fortify Audit Workbench (Awb) And Micro Focus Fortify Software Security Center (Ssc)1 vulnerabilities

CVE-2018-1343micro focusnetiq privileged account manager (pam) 3.1 and 3.2+18y ago06-03-2018 20:00

PAM exposure enabling unauthenticated access to remote host CVE-2018-1342micro focusnetiq access manager, administrative console+18y ago26-01-2018 02:00

A Vulnerability exists on Admin Console where an attacker can upload files to the Admin Console server, and potentially execute them. This impacts NetIQ Access Manager versions 4.3 and 4.4 as well as the Administrative console.CVE-2018-19641micro focussolutions business manager (sbm)+17y ago27-03-2019 16:42

Unauthenticated remote code execution issue in Micro Focus Solutions Business Manager (SBM) (formerly Serena Business Manager (SBM)) versions prior to 11.5.CVE-2018-19643micro focussolutions business manager (sbm)+17y ago27-03-2019 17:13

Information leakage issue in Micro Focus Solutions Business Manager (SBM) (formerly Serena Business Manager (SBM)) versions prior to 11.5.CVE-2018-19642micro focussolutions business manager (sbm)+17y ago27-03-2019 16:55

Denial of service issue in Micro Focus Solutions Business Manager (SBM) (formerly Serena Business Manager (SBM)) versions prior to 11.5.CVE-2018-19644micro focussolutions business manager (sbm)+17y ago27-03-2019 17:07

Reflected cross site script issue in Micro Focus Solutions Business Manager (SBM) (formerly Serena Business Manager (SBM)) versions prior to 11.5.CVE-2018-17950micro focusnetiq edirectory 9.1 sp2+17y ago12-12-2018 14:00

Incorrect enforcement of authorization checks in eDirectory prior to 9.1 SP2 CVE-2018-17949micro focusnetiq imanager 3.1 sp2+17y ago12-12-2018 14:00

Cross site scripting vulnerability in iManager prior to 3.1 SP2.CVE-2018-17952micro focusnetiq edirectory 9.1 sp2+17y ago12-12-2018 14:00

Cross site scripting vulnerability in eDirectory prior to 9.1 SP2 CVE-2018-7687micro focusclient for open enterprise server+18y ago21-05-2018 20:00

The Micro Focus Client for OES before version 2 SP4 IR8a has a vulnerability that could allow a local attacker to elevate privileges via a buffer overflow in ncfsd.sys.CVE-2018-7683micro focussolutions business manager 11.4+18y ago21-06-2018 19:00

Micro Focus Solutions Business Manager versions prior to 11.4 might reveal certain sensitive information in server log files.CVE-2018-7682micro focussolutions business manager 11.4+18y ago22-06-2018 22:00

Micro Focus Solutions Business Manager versions prior to 11.4 allows a user to invoke SBM RESTful services across domains.CVE-2018-7681micro focussolutions business manager 11.4+18y ago21-06-2018 19:00

Micro Focus Solutions Business Manager versions prior to 11.4 allows JavaScript to be embedded in URLs placed in "Favorites" folder. If the user has certain administrative privileges then this vulnerability can impact other users in the system.CVE-2018-7692micro focusnetiq edirectory versions prior to 9.1.1 hf1+18y ago09-08-2018 21:00

Unvalidated redirect vulnerability in in NetIQ eDirectory before 9.1.1 HF1.CVE-2018-7691micro focusfortify software security center (ssc)+17y ago13-12-2018 14:00

A potential Remote Unauthorized Access in Micro Focus Fortify Software Security Center (SSC), versions 17.10, 17.20, 18.10 this exploitation could allow Remote Unauthorized Access CVE-2018-7690micro focusfortify software security center (ssc)+17y ago13-12-2018 14:00

A potential Remote Unauthorized Access in Micro Focus Fortify Software Security Center (SSC), versions 17.10, 17.20, 18.10 this exploitation could allow Remote Unauthorized Access CVE-2018-7686micro focusedirectory (zdi)+18y ago09-08-2018 21:00

Information leakage vulnerability in NetIQ eDirectory before 9.1.1 HF1 due to shared memory usage.CVE-2018-7680micro focussolutions business manager 11.4+18y ago21-06-2018 19:00

Micro Focus Solutions Business Manager versions prior to 11.4 can reflect back HTTP header values.CVE-2018-7679micro focussolutions business manager 11.4+18y ago21-06-2018 19:00

Micro Focus Solutions Business Manager versions prior to 11.4 when ASP.NET is configured with execute permission on the virtual directories and does not validate the contents of user avatar images, could lead to remote code execution.CVE-2018-18590micro focusoperation bridge containerized suite+17y ago07-11-2018 16:00

A potential remote code execution and information disclosure vulnerability exists in Micro Focus Operations Bridge containerized suite versions 2017.11, 2018.02, 2018.05, 2018.08. This vulnerability could allow for information disclosure.