Micro Focus International vulnerabilities
9 vulnerabilities
Known vulnerabilities in Micro Focus International products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 9 products.
Products
9- Acutoweb1 vulnerabilities
- Arcsight Logger1 vulnerabilities
- Micro Focus Service Manager Automation (Sma)1 vulnerabilities
- Micro Focus Vibe.1 vulnerabilities
- Open Enterprise Server1 vulnerabilities
- Operations Agent1 vulnerabilities
- Service Manager1 vulnerabilities
- Service Manager (Server).1 vulnerabilities
- Service Manager (Web Tier).1 vulnerabilities
CVE-2020-9519micro focus internationalservice manager (server).+1
EPSS score0.86%
HTTP methods reveled in Web services vulnerability in Micro Focus Service manager (server), affecting versions 9.40, 9.41, 9.50, 9.51, 9.52, 9.60, 9.61, 9.62, 9.63. The vulnerability could be exploited to allow exposure of configuration data.CVE-2020-9520micro focus internationalmicro focus vibe.+1EPSS score0.81%
A stored XSS vulnerability was discovered in Micro Focus Vibe, affecting all Vibe version prior to 4.0.7. The vulnerability could allows a remote attacker to craft and store malicious content into Vibe such that when the content is viewed by another user of the system, attacker controlled JavaScript will execute in the security context of the target user’s browser.CVE-2020-9518micro focus internationalservice manager (web tier).+1EPSS score0.86%
Login filter can access configuration files vulnerability in Micro Focus Service Manager (Web Tier), affecting versions 9.50, 9.51, 9.52, 9.60, 9.61, 9.62. The vulnerability could be exploited to allow unauthorized access to configuration data.CVE-2020-9517micro focus internationalservice manager+1EPSS score0.48%
There is an improper restriction of rendered UI layers or frames vulnerability in Micro Focus Service Manager Release Control versions 9.50 and 9.60. The vulnerability may result in the ability of malicious users to perform UI redress attacks.CVE-2020-9521micro focus internationalmicro focus - service manager automation (sma)+1EPSS score1.14%
An SQL injection vulnerability was discovered in Micro Focus Service Manager Automation (SMA), affecting versions 2019.08, 2019.05, 2019.02, 2018.08, 2018.05, 2018.02. The vulnerability could allow for the improper neutralization of special elements in SQL commands and may lead to the product being vulnerable to SQL injection.CVE-2017-5182micro focus internationalopen enterprise server+1EPSS score3.15%
Remote Manager in Open Enterprise Server (OES) allows unauthenticated remote attackers to read any arbitrary file, via a specially crafted URL, that allows complete directory traversal and total information disclosure. This vulnerability is present on all versions of OES for linux, it applies to OES2015 SP1 before Maintenance Update 11080, OES2015 before Maintenance Update 11079, OES11 SP3 before Maintenance Update 11078, OES11 SP2 before Maintenance Update 11077).CVE-2019-11657micro focus internationalarcsight logger+1EPSS score0.45%
Cross-Site Request Forgery vulnerability in all Micro Focus ArcSight Logger affecting all product versions below version 7.0. The vulnerability could be exploited to perform CSRF attack.CVE-2019-17087micro focus internationalacutoweb+1EPSS score1.07%
Unauthorized file download vulnerability in all supported versions of Micro Focus AcuToWeb. The vulnerability could be exploited to enumerate and download files from the filesystem of the system running AcuToWeb, with the privileges of the account AcuToWeb is running under.CVE-2019-17085micro focus internationaloperations agent+1EPSS score0.77%
XXE attack vulnerability on Micro Focus Operations Agent, affected version 12.0, 12.01, 12.02, 12.03, 12.04, 12.05, 12.06, 12.10, 12.11. The vulnerability could be exploited to do an XXE attack on Operations Agent.