CveMateVulnerability intelligence

Microfocus vulnerabilities

273 vulnerabilities

Known vulnerabilities in Microfocus products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 96 products.

Products

50 of 96

Imanager22 vulnerabilities
Access Manager18 vulnerabilities
Solutions Business Manager17 vulnerabilities
Edirectory16 vulnerabilities
Service Manager16 vulnerabilities
Enterprise Developer12 vulnerabilities
Enterprise Server12 vulnerabilities
Netiq Advanced Authentication11 vulnerabilities
Application Automation Tools9 vulnerabilities
Arcsight Logger9 vulnerabilities
Arcsight Enterprise Security Manager8 vulnerabilities
Arcsight Management Center8 vulnerabilities
Operations Agent7 vulnerabilities
Operations Bridge7 vulnerabilities
Filr6 vulnerabilities
Operations Bridge Manager6 vulnerabilities
Application Performance Management5 vulnerabilities
Netiq Access Manager5 vulnerabilities
Visibroker5 vulnerabilities
Fortify Software Security Center4 vulnerabilities
Netiq Self Service Password Reset4 vulnerabilities
Operation Bridge Reporter4 vulnerabilities
Sentinel4 vulnerabilities
Service Management Automation4 vulnerabilities
Verastream Host Integrator4 vulnerabilities
Content Manager3 vulnerabilities
Data Center Automation3 vulnerabilities
Data Protector3 vulnerabilities
Dimensions Cm3 vulnerabilities
Enterprise Server Monitor And Control3 vulnerabilities
Hybrid Cloud Management3 vulnerabilities
Identity Manager3 vulnerabilities
Privileged User Manager3 vulnerabilities
Project And Portfolio Management3 vulnerabilities
Rumba3 vulnerabilities
Secure Messaging Gateway3 vulnerabilities
Bi Directional Driver2 vulnerabilities
Cms Server2 vulnerabilities
Cobol Server2 vulnerabilities
Directory Server2 vulnerabilities
Enterprise Test Server2 vulnerabilities
Groupwise2 vulnerabilities
Netiq Privileged Access Manager2 vulnerabilities
Network Automation2 vulnerabilities
Network Operations Management2 vulnerabilities
Self Service Password Reset2 vulnerabilities
Service Manager Automation2 vulnerabilities
Ucmdb Configuration Manager2 vulnerabilities
Visual Cobol2 vulnerabilities
Accurev1 vulnerabilities

CVE-2018-19641micro focussolutions business manager (sbm)+17y ago27-03-2019 16:42

Unauthenticated remote code execution issue in Micro Focus Solutions Business Manager (SBM) (formerly Serena Business Manager (SBM)) versions prior to 11.5.CVE-2018-19643micro focussolutions business manager (sbm)+17y ago27-03-2019 17:13

Information leakage issue in Micro Focus Solutions Business Manager (SBM) (formerly Serena Business Manager (SBM)) versions prior to 11.5.CVE-2018-19642micro focussolutions business manager (sbm)+17y ago27-03-2019 16:55

Denial of service issue in Micro Focus Solutions Business Manager (SBM) (formerly Serena Business Manager (SBM)) versions prior to 11.5.CVE-2018-19644micro focussolutions business manager (sbm)+17y ago27-03-2019 17:07

Reflected cross site script issue in Micro Focus Solutions Business Manager (SBM) (formerly Serena Business Manager (SBM)) versions prior to 11.5.CVE-2018-19645microfocussolutions_business_manager+17y ago12-02-2019 20:00

An Authentication Bypass issue exists in Solutions Business Manager (SBM) (formerly Serena Business Manager (SBM)) versions prior to 11.5.CVE-2018-17950micro focusnetiq edirectory 9.1 sp2+17y ago12-12-2018 14:00

Incorrect enforcement of authorization checks in eDirectory prior to 9.1 SP2 CVE-2018-17949micro focusnetiq imanager 3.1 sp2+17y ago12-12-2018 14:00

Cross site scripting vulnerability in iManager prior to 3.1 SP2.CVE-2018-17952micro focusnetiq edirectory 9.1 sp2+17y ago12-12-2018 14:00

Cross site scripting vulnerability in eDirectory prior to 9.1 SP2 CVE-2018-17948access manageraccess manager+17y ago20-11-2018 18:00

An open redirect vulnerability exists in the Access Manager Identity Provider prior to 4.4 SP3.CVE-2018-7687micro focusclient for open enterprise server+18y ago21-05-2018 20:00

The Micro Focus Client for OES before version 2 SP4 IR8a has a vulnerability that could allow a local attacker to elevate privileges via a buffer overflow in ncfsd.sys.CVE-2018-7683micro focussolutions business manager 11.4+18y ago21-06-2018 19:00

Micro Focus Solutions Business Manager versions prior to 11.4 might reveal certain sensitive information in server log files.CVE-2018-7682micro focussolutions business manager 11.4+18y ago22-06-2018 22:00

Micro Focus Solutions Business Manager versions prior to 11.4 allows a user to invoke SBM RESTful services across domains.CVE-2018-7681micro focussolutions business manager 11.4+18y ago21-06-2018 19:00

Micro Focus Solutions Business Manager versions prior to 11.4 allows JavaScript to be embedded in URLs placed in "Favorites" folder. If the user has certain administrative privileges then this vulnerability can impact other users in the system.CVE-2018-7692micro focusnetiq edirectory versions prior to 9.1.1 hf1+18y ago09-08-2018 21:00

Unvalidated redirect vulnerability in in NetIQ eDirectory before 9.1.1 HF1.CVE-2018-7691micro focusfortify software security center (ssc)+17y ago13-12-2018 14:00

A potential Remote Unauthorized Access in Micro Focus Fortify Software Security Center (SSC), versions 17.10, 17.20, 18.10 this exploitation could allow Remote Unauthorized Access CVE-2018-7690micro focusfortify software security center (ssc)+17y ago13-12-2018 14:00

A potential Remote Unauthorized Access in Micro Focus Fortify Software Security Center (SSC), versions 17.10, 17.20, 18.10 this exploitation could allow Remote Unauthorized Access CVE-2018-7686micro focusedirectory (zdi)+18y ago09-08-2018 21:00

Information leakage vulnerability in NetIQ eDirectory before 9.1.1 HF1 due to shared memory usage.CVE-2018-7680micro focussolutions business manager 11.4+18y ago21-06-2018 19:00

Micro Focus Solutions Business Manager versions prior to 11.4 can reflect back HTTP header values.CVE-2018-7679micro focussolutions business manager 11.4+18y ago21-06-2018 19:00

Micro Focus Solutions Business Manager versions prior to 11.4 when ASP.NET is configured with execute permission on the virtual directories and does not validate the contents of user avatar images, could lead to remote code execution.CVE-2018-7675microfocussentinel+18y ago07-03-2018 22:00

In NetIQ Sentinel before 8.1.x, a Sentinel user is logged into the Sentinel Web Interface. After performing some tasks within Sentinel the user does not log out but does go idle for a period of time. This in turn causes the interface to timeout so that it requires the user to re-authenticate. If another user is passing by and decides to login, their credentials are accepted. While The user does not inherit any of the other users privileges, they are able to view the previous screen. In this case it is possible that the user can see another users events or configuration information for whatever view is currently showing.