Microfocus vulnerabilities, page 3
273 vulnerabilities
Known vulnerabilities in Microfocus products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 96 products.
CVE-2013-4815microfocusarcsight_enterprise_security_manager
EPSS score0.94%
Cross-site scripting (XSS) vulnerability in the web interface in HP ArcSight Enterprise Security Manager (ESM) before 5.5 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.CVE-2021-38129microfocusoperations_agentEPSS score0.21%
Escalation of privileges vulnerability in Micro Focus in Micro Focus Operations Agent, affecting versions 12.x up to and including 12.21. The vulnerability could be exploited by a non-privileged local user to access system monitoring data collected by Operations Agent.CVE-2021-38116microfocusimanager+1EPSS score0.62%
Possible Elevation of Privilege Vulnerability
in iManager has been discovered in
OpenText™ iManager. This impacts all versions before 3.2.5CVE-2021-38134microfocusimanager+1EPSS score0.29%
Possible XSS in iManager URL for access Component has been discovered in
OpenText™ iManager 3.2.5.0000.CVE-2021-38125microfocusoperations_bridgeEPSS score2.00%
Unauthenticated remote code execution in Micro Focus Operations Bridge containerized, affecting versions 2021.05, 2021.08, and newer versions of Micro Focus Operations Bridge containerized if the deployment was upgraded from 2021.05 or 2021.08. The vulnerability could be exploited to unauthenticated remote code execution.CVE-2021-38123microfocusnetwork_automationEPSS score0.65%
Open Redirect vulnerability in Micro Focus Network Automation, affecting Network Automation versions 10.4x, 10.5x, 2018.05, 2018.11, 2019.05, 2020.02, 2020.08, 2020.11, 2021.05. The vulnerability could allow redirect users to malicious websites after authentication.CVE-2021-38131microfocusedirectory+1EPSS score0.24%
Possible Cross-Site Scripting (XSS) Vulnerability
in eDirectory has been discovered in
OpenText™ eDirectory 9.2.5.0000.CVE-2021-38120microfocusnetiq_advanced_authentication+1EPSS score0.53%
A vulnerability identified in Advance Authentication that allows bash command Injection in administrative controlled functionality of backup due to improper
handling in provided command parameters. This issue affects NetIQ Advance Authentication version before 6.3.5.1.CVE-2021-38135microfocusimanager+1EPSS score0.45%
Possible
External Service Interaction attack
in iManager has been discovered in
OpenText™ iManager 3.2.6.0000.CVE-2021-38117microfocusimanager+1EPSS score1.14%
Possible Command injection Vulnerability
in iManager has been discovered in
OpenText™ iManager 3.2.4.0000.CVE-2021-38132microfocusedirectory+1EPSS score0.40%
Possible
External Service Interaction attack
in eDirectory has been discovered in
OpenText™ eDirectory. This impact all version before 9.2.6.0000.CVE-2021-38130microfocusvoltage_securemailEPSS score0.86%
A potential Information leakage vulnerability has been identified in versions of Micro Focus Voltage SecureMail Mail Relay prior to 7.3.0.1. The vulnerability could be exploited to create an information leakage attack.CVE-2021-38122microfocusnetiq_advanced_authentication+1EPSS score0.29%
A Cross-Site Scripting vulnerable identified in NetIQ Advance Authentication that impacts the server functionality and disclose sensitive information.
This issue affects NetIQ Advance Authentication before 6.3.5.1CVE-2021-38121microfocusnetiq_advanced_authentication+1EPSS score0.18%
Insufficient or weak TLS protocol version identified in Advance authentication client server communication when specific service is accessed between devices. This issue affects NetIQ Advance Authentication versions before 6.3.5.1CVE-2021-38133microfocusedirectory+1EPSS score0.35%
Possible
External Service Interaction attack
in eDirectory has been discovered in
OpenText™ eDirectory. This impact all version before 9.2.6.0000.CVE-2021-38124microfocusarcsight_enterprise_security_managerEPSS score2.08%
Remote Code Execution vulnerability in Micro Focus ArcSight Enterprise Security Manager (ESM) product, affecting versions 7.0.2 through 7.5. The vulnerability could be exploited resulting in remote code execution.CVE-2021-38119microfocusimanager+1EPSS score0.31%
Possible Reflected Cross-Site Scripting (XSS) Vulnerability
in iManager has been discovered in
OpenText™ iManager 3.2.4.0000.CVE-2021-38127microfocusarcsight_enterprise_security_managerEPSS score0.57%
Potential vulnerabilities have been identified in Micro Focus ArcSight Enterprise Security Manager, affecting versions 7.4.x and 7.5.x. The vulnerabilities could be remotely exploited resulting in Cross-Site Scripting (XSS).CVE-2021-38126microfocusarcsight_enterprise_security_managerEPSS score0.57%
Potential vulnerabilities have been identified in Micro Focus ArcSight Enterprise Security Manager, affecting versions 7.4.x and 7.5.x. The vulnerabilities could be remotely exploited resulting in Cross-Site Scripting (XSS).CVE-2021-38118microfocusimanager+1EPSS score0.21%
Possible improper input validation Vulnerability
in iManager has been discovered in
OpenText™ iManager 3.2.4.0000.