Microfocus vulnerabilities, page 4
273 vulnerabilities
Known vulnerabilities in Microfocus products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 96 products.
CVE-2021-22503microfocusedirectory+1
EPSS score0.24%
Possible
Improper Neutralization of Input During Web Page Generation Vulnerability
in eDirectory has been discovered in
OpenText™ eDirectory 9.2.3.0000.CVE-2021-22500microfocusapplication_performance_managementEPSS score0.48%
Cross Site Request Forgery vulnerability in Micro Focus Application Performance Management product, affecting versions 9.40, 9.50 and 9.51. The vulnerability could be exploited by attacker to trick the users into executing actions of the attacker's choosing.CVE-2021-22522microfocusverastream_host_integratorEPSS score0.62%
Reflected Cross-Site Scripting vulnerability in Micro Focus Verastream Host Integrator, affecting version version 7.8 Update 1 and earlier versions. The vulnerability could allow disclosure of confidential data.CVE-2021-22497micro focusadvanced authentication+1EPSS score0.76%
Advanced Authentication versions prior to 6.3 SP4 have a potential broken authentication due to improper session management issue.CVE-2021-22511org.jenkins-ci.pluginshp-application-automation-tools-plugin+1EPSS score0.41%
Improper Certificate Validation vulnerability in Micro Focus Application Automation Tools Plugin - Jenkins plugin. The vulnerability affects version 6.7 and earlier versions. The vulnerability could allow unconditionally disabling of SSL/TLS certificates.CVE-2021-22524micro focusnetiq access manager+1EPSS score0.65%
Injection attack caused the denial of service vulnerability in NetIQ Access Manager prior to 5.0.1 and 4.5.4CVE-2021-22531microfocusaccess_managerEPSS score0.56%
A bug exist in the input parameter of Access Manager that allows supply of invalid character to trigger cross-site scripting vulnerability. This affects NetIQ Access Manager 4.5 and 5.0CVE-2021-22526micro focusnetiq access manager+1EPSS score0.48%
Open Redirection vulnerability in NetIQ Access Manager prior to 5.0.1 and 4.5.4CVE-2021-22527micro focusnetiq access manager+1EPSS score0.73%
Information leakage vulnerability in NetIQ Access Manager prior to 5.0.1 and 4.5.4CVE-2021-22510org.jenkins-ci.pluginshp-application-automation-tools-plugin+1EPSS score4.98%
Reflected XSS vulnerability in Micro Focus Application Automation Tools Plugin - Jenkins plugin. The vulnerability affects all version 6.7 and earlier versions.CVE-2021-22517microfocusdata_protectorEPSS score1.02%
A potential unauthorized privilege escalation vulnerability has been identified in Micro Focus Data Protector. The vulnerability affects versions 10.10, 10.20, 10.30, 10.40, 10.50, 10.60, 10.70, 10.80, 10.0 and 10.91. A privileged user may potentially misuse this feature and thus allow unintended and unauthorized access of data.CVE-2021-22535microfocusnetiq_directory_and_resource_administratorEPSS score0.76%
Unauthorized information security disclosure vulnerability on Micro Focus Directory and Resource Administrator (DRA) product, affecting all DRA versions prior to 10.1 Patch 1. The vulnerability could lead to unauthorized information disclosure.CVE-2021-22533microfocusedirectory+1EPSS score0.44%
Possible Insertion of Sensitive Information into Log File Vulnerability
in eDirectory has been discovered in
OpenText™ eDirectory 9.2.4.0000.CVE-2021-22525microfocusaccess_managerEPSS score0.24%
This release addresses a potential information leakage vulnerability in NetIQ Access Manager versions prior to 5.0.1CVE-2021-22509microfocusnetiq_advanced_authentication+1EPSS score0.21%
A vulnerability identified in storing and reusing information in Advance Authentication. This issue can lead to leakage of sensitive data to unauthorized user. The issue affects NetIQ Advance Authentication before 6.3.5.1CVE-2021-22506microfocusaccess_managerKEVEPSS score25.70%
Advance configuration exposing Information Leakage vulnerability in Micro Focus Access Manager product, affects all versions prior to version 5.0. The vulnerability could cause information leakage.CVE-2021-22512org.jenkins-ci.pluginshp-application-automation-tools-plugin+1EPSS score0.72%
Cross-Site Request Forgery (CSRF) vulnerability in Micro Focus Application Automation Tools Plugin - Jenkins plugin. The vulnerability affects version 6.7 and earlier versions. The vulnerability could allow form validation without permission checks.CVE-2021-22515micro focusnetiq advanced authentication+1EPSS score0.69%
Multi-Factor Authentication (MFA) functionality can be bypassed, allowing the use of single factor authentication in NetIQ Advanced Authentication versions prior to 6.3 SP4 Patch 1.CVE-2021-22519microfocussitescopeEPSS score2.01%
Execute arbitrary code vulnerability in Micro Focus SiteScope product, affecting versions 11.40,11.41 , 2018.05(11.50), 2018.08(11.51), 2018.11(11.60), 2019.02(11.70), 2019.05(11.80), 2019.08(11.90), 2019.11(11.91), 2020.05(11.92), 2020.10(11.93). The vulnerability could allow remote attackers to execute arbitrary code on affected installations of SiteScope.CVE-2021-22496microfocusaccess_managerEPSS score1.17%
Authentication Bypass Vulnerability in Micro Focus Access Manager Product, affects all version prior to version 4.5.3.3. The vulnerability could cause information leakage.