Microfocus Content Manager vulnerabilities

3 vulnerabilities

Known vulnerabilities in Microfocus Content Manager, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

4.3CVE-2019-11658micro focuscontent manager+1
EPSS score
0.69%
Information exposure in Micro Focus Content Manager, versions 9.1, 9.2 and 9.3. This vulnerability when configured to use an Oracle database, allows valid system users to gain access to a limited subset of records they would not normally be able to access when the system is in an undisclosed abnormal state.5.5CVE-2019-11653micro focuscontent manager+1
EPSS score
0.78%
Remote Access Control Bypass in Micro Focus Content Manager. versions 9.1, 9.2, 9.3. The vulnerability could be exploited to manipulate data stored during another user’s CheckIn request.7.5CVE-2019-3489micro focusmicro focus content manager+1
EPSS score
1.69%
An unauthenticated file upload vulnerability has been identified in the Web Client component of Micro Focus Content Manager 9.1, 9.2, and 9.3 when configured to use the ADFS authentication method. The vulnerability could be exploited by an unauthenticated remote attacker to upload content to arbitrary locations on the Content Manager server.