# cve.now: Micro Focus

The newest entries naming Micro Focus as an affected vendor (up to 200), of 127 in all, 0 known exploited. Older ones are in the full catalog at https://cve.now/latest.md.

- [CVE-2020-25835](https://cve.now/CVE-2020-25835.md): Micro Focus ArcSight Management Center Remote Vulnerability (CVSS 5.9)
- [CVE-2023-32265](https://cve.now/CVE-2023-32265.md): Mitigations and availability of updates relating to security vulnerability in ESCWA component CVE-2023-32265. (CVSS 7.1)
- [CVE-2023-32263](https://cve.now/CVE-2023-32263.md): Dimensions CM Plugin for Jenkins 0.8.17 – 0.9.3 (CVSS 2.6)
- [CVE-2023-32262](https://cve.now/CVE-2023-32262.md): Dimensions CM Plugin for Jenkins 0.8.17 – 0.9.3 (CVSS 4.3)
- [CVE-2023-32261](https://cve.now/CVE-2023-32261.md): Dimensions CM Plugin for Jenkins 0.8.17 – 0.9.3 (CVSS 4.2)
- [CVE-2022-38758](https://cve.now/CVE-2022-38758.md): XSS vulnerabilities in iManager (CVSS 7.2)
- [CVE-2022-26329](https://cve.now/CVE-2022-26329.md): File existence disclosue vulnerability in IDM plugin (CVSS 1.8)
- [CVE-2022-38757](https://cve.now/CVE-2022-38757.md): CVE-2022-38757 ZENworks (CVSS 7.2)
- [CVE-2022-38756](https://cve.now/CVE-2022-38756.md): CVE-2022-38756 vulnerability in GW Web prior to 18.4.2 (CVSS 4.3)
- [CVE-2022-38754](https://cve.now/CVE-2022-38754.md): CVE-2022-38754 - Micro Focus Operations Bridge Manager and OpsBridge Containerized - Cross Site Scripting (XSS) (CVSS 8.0)
- [CVE-2022-38755](https://cve.now/CVE-2022-38755.md): Filr Remote unauthenticated user enumeration for versions prior to 4.3.1.1 (CVSS 5.3)
- [CVE-2022-26331](https://cve.now/CVE-2022-26331.md): Potential vulnerabilities have been identified in Micro Focus ArcSight Logger. The vulnerabilities could be remotely exploited resulting in Self Cross-Site Scripting (XSS). (CVSS 6.1)
- [CVE-2022-26330](https://cve.now/CVE-2022-26330.md): Potential vulnerability has been identified in Micro Focus ArcSight Logger. The vulnerability could be remotely exploited resulting in Information Disclosure. (CVSS 6.5)
- [CVE-2022-26326](https://cve.now/CVE-2022-26326.md): Potential open redirection vulnerability in NetIQ Access Manager versions prior to version 5.0.2 (CVSS 4.0)
- [CVE-2022-26325](https://cve.now/CVE-2022-26325.md): Cross Site Scripting vulnerability in NetIQ Access Manager versions prior to version 5.0.2 (CVSS 2.9)
- [CVE-2021-22526](https://cve.now/CVE-2021-22526.md): Open Redirection vulnerability in NetIQ Access Manager versions prior to version 4.5.4 and 5.0.1 (CVSS 4.9)
- [CVE-2021-22524](https://cve.now/CVE-2021-22524.md): Denial of service vulnerability in NetIQ Access Manager versions prior to version 4.5.4 and 5.0.1 (CVSS 5.4)
- [CVE-2021-22527](https://cve.now/CVE-2021-22527.md): Information leakage vulnerability in NetIQ Access Manager versions prior to version 4.5.4 and 5.0.1 (CVSS 6.0)
- [CVE-2021-22528](https://cve.now/CVE-2021-22528.md): Information leakage vulnerability in NetIQ Access Manager versions prior to version 4.5.4 and 5.0.1 (CVSS 8.0)
- [CVE-2021-22515](https://cve.now/CVE-2021-22515.md): Multi-Factor Authentication (MFA) downgrade exposure in NetIQ Advanced Authentication Server (CVSS 4.8)
- [CVE-2021-22497](https://cve.now/CVE-2021-22497.md): Advanced Authentication Improper Session Management (CVSS 3.8)
- [CVE-2019-18943](https://cve.now/CVE-2019-18943.md): XML External Entity processing (CVSS 6.1)
- [CVE-2019-18942](https://cve.now/CVE-2019-18942.md): Stored cross site scripting (CVSS 5.5)
- [CVE-2019-18944](https://cve.now/CVE-2019-18944.md): Micro Focus Solutions Business Manager Application Repository versions prior to 11.7.1 are vulnerable to reflected XSS. (CVSS 4.9)
- [CVE-2019-18945](https://cve.now/CVE-2019-18945.md): privilege escalation (CVSS 7.3)
- [CVE-2019-18947](https://cve.now/CVE-2019-18947.md): information disclosure (CVSS 3.5)
- [CVE-2019-18946](https://cve.now/CVE-2019-18946.md): Session fixation (CVSS 4.8)
- [CVE-2020-25833](https://cve.now/CVE-2020-25833.md): Persistent cross-Site Scripting vulnerability on Micro Focus IDOL product, affecting all version prior to version 12.7. (no CVSS)
- [CVE-2020-25832](https://cve.now/CVE-2020-25832.md): Reflected Cross Site scripting vulnerability on Micro Focus Filr product, affecting version 4.2.1. (no CVSS)
- [CVE-2020-11851](https://cve.now/CVE-2020-11851.md): Arbitrary code execution vulnerability on Micro Focus ArcSight Logger product, affecting all version prior to 7.1.1. (no CVSS)
- [CVE-2020-11860](https://cve.now/CVE-2020-11860.md): Cross-Site Scripting vulnerability on Micro Focus ArcSight Logger product, affecting all version prior to 7.1.1. (no CVSS)
- [CVE-2020-25834](https://cve.now/CVE-2020-25834.md): Cross-Site Scripting vulnerability on Micro Focus ArcSight Logger product, affecting version 7.1. (no CVSS)
- [CVE-2020-11858](https://cve.now/CVE-2020-11858.md): Code execution with escalated privilegesn vlnerability in Operation bridge Manager and Operations Bridge (containerized) products. (CVSS 7.8)
- [CVE-2020-11854](https://cve.now/CVE-2020-11854.md): Arbitrary code execution vlnerability in Operation bridge Manager, Application Performance Management and Operations Bridge (containerized) products. (CVSS 9.8)
- [CVE-2020-11853](https://cve.now/CVE-2020-11853.md): Arbitrary code execution vulnerability on multiple Micro Focus products (CVSS 8.8)
- [CVE-2020-11844](https://cve.now/CVE-2020-11844.md): Incorrect Authorization vulnerability in the Micro Focus Container Deployment Foundation affecting multiple products. (CVSS 10.0)
- [CVE-2019-11662](https://cve.now/CVE-2019-11662.md): Class and method names in error message in Micro Focus Service Manager product versions 9.30, 9.31, 9.32, 9.33, 9.34, 9.35, 9.40, 9.41, 9.50 (no CVSS)
- [CVE-2019-11661](https://cve.now/CVE-2019-11661.md): Allow changes to some table by non-SysAdmin in Micro Focus Service Manager product versions 9.30, 9.31, 9.32, 9.33, 9.34, 9.35, 9.40, 9.41, (no CVSS)
- [CVE-2019-11664](https://cve.now/CVE-2019-11664.md): Clear text password in browser in Micro Focus Service Manager product versions 9.30, 9.31, 9.32, 9.33, 9.34, 9.35, 9.40, 9.41, 9.50, 9.51, 9 (no CVSS)
- [CVE-2019-11663](https://cve.now/CVE-2019-11663.md): Clear text credentials are used to access managers app in Tomcat in Micro Focus Service Manager product versions 9.30, 9.31, 9.32, 9.33, 9.3 (no CVSS)
- [CVE-2019-11665](https://cve.now/CVE-2019-11665.md): Data exposure in Micro Focus Service Manager product versions 9.30, 9.31, 9.32, 9.33, 9.34, 9.35, 9.40, 9.41, 9.50, 9.51, 9.52, 9.60, 9.61, (no CVSS)
- [CVE-2019-11666](https://cve.now/CVE-2019-11666.md): Insecure deserialization of untrusted data in Micro Focus Service Manager product versions 9.30, 9.31, 9.32, 9.33, 9.34, 9.35, 9.40, 9.41, 9 (no CVSS)
- [CVE-2019-11667](https://cve.now/CVE-2019-11667.md): Unauthorized access to contact information in Micro Focus Service Manager, versions 9.41, 9.50, 9.51, 9.52, 9.60, 9.61, 9.62. (no CVSS)
- [CVE-2019-11669](https://cve.now/CVE-2019-11669.md): Modifiable read only check box In Micro Focus Service Manager, versions 9.60p1, 9.61, 9.62. (no CVSS)
- [CVE-2019-11658](https://cve.now/CVE-2019-11658.md): Information exposure in Micro Focus Content Manager, versions 9.1, 9.2 and 9.3. (no CVSS)
- [CVE-2019-11654](https://cve.now/CVE-2019-11654.md): A path traversal vulnerability has been identified in Verastream Host Integrator (CVSS 8.6)
- [CVE-2019-11652](https://cve.now/CVE-2019-11652.md): A potential authorization bypass issue was found in Micro Focus Self Service Password Reset (SSPR) versions prior to: 4.4.0.3, 4.3.0.6, and (no CVSS)
- [CVE-2019-11653](https://cve.now/CVE-2019-11653.md): Remote Access Control Bypass in Micro Focus Content Manager. (no CVSS)
- [CVE-2019-3486](https://cve.now/CVE-2019-3486.md): ArcSight Security Management Center stored cross site script issue in version prior to 2.9.1 (CVSS 4.6)
- [CVE-2019-3485](https://cve.now/CVE-2019-3485.md): ArcSight Logger stored cross site script issue in version prior to 6.7.1 (CVSS 4.6)
- [CVE-2019-11650](https://cve.now/CVE-2019-11650.md): A potential Man in the Middle attack (MITM) was found in NetIQ Advanced Authentication Framework versions prior to 6.0. (no CVSS)
- [CVE-2019-11648](https://cve.now/CVE-2019-11648.md): An information leakage exists in Micro Focus NetIQ Self Service Password Reset Software all versions prior to version 4.4. (no CVSS)
- [CVE-2019-11647](https://cve.now/CVE-2019-11647.md): A potential XSS exists in Self Service Password Reset, in Micro Focus NetIQ Software all versions prior to version 4.4. (no CVSS)
- [CVE-2019-11649](https://cve.now/CVE-2019-11649.md): KM03461174 Micro Focus Fortify Software Security Center Server, CVE-2019-11649 (CVSS 5.4)
- [CVE-2019-3477](https://cve.now/CVE-2019-3477.md): Micro Focus Solution Business Manager versions prior to 11.4.2 is susceptible to open redirect. (no CVSS)
- [CVE-2019-3493](https://cve.now/CVE-2019-3493.md): A potential security vulnerability has been identified in Micro Focus Network Automation Software 9.20, 9.21, 10.00, 10.10, 10.20, 10.30, 10 (no CVSS)
- [CVE-2019-3489](https://cve.now/CVE-2019-3489.md): An unauthenticated file upload vulnerability has been identified in the Web Client component of Micro Focus Content Manager 9.1, 9.2, and 9. (no CVSS)
- [CVE-2018-19643](https://cve.now/CVE-2018-19643.md): Solutions Business Manager (SBM) Information Leakage issue in version prior to 11.5 (CVSS 4.7)
- [CVE-2018-19644](https://cve.now/CVE-2018-19644.md): Solutions Business Manager (SBM) reflected cross site script issue in version prior to 11.5 (CVSS 5.0)
- [CVE-2018-19642](https://cve.now/CVE-2018-19642.md): Solutions Business Manager (SBM) Denial of Service issue in version prior to 11.5 (CVSS 5.1)
- [CVE-2018-19641](https://cve.now/CVE-2018-19641.md): Solutions Business Manager (SBM) Unauthenticated remote code execution issue in version prior to 11.5 (CVSS 6.1)
- [CVE-2019-3475](https://cve.now/CVE-2019-3475.md): Local privilege escalation in Filr famtd (CVSS 7.8)
- [CVE-2019-3474](https://cve.now/CVE-2019-3474.md): Path traversal vulnerability in Filr web application (CVSS 6.5)
- [CVE-2018-18593](https://cve.now/CVE-2018-18593.md): MFSBGN03838 rev.1 - UCMDB Configuration Management Service, Multiple Vulnerabilities (CVSS 6.5)
- [CVE-2018-7691](https://cve.now/CVE-2018-7691.md): MFSBGN03835 rev.1 - Fortify Software Security Center (SSC), Remote Unauthorized Access (CVSS 6.5)
- [CVE-2018-7690](https://cve.now/CVE-2018-7690.md): MFSBGN03835 rev.1 - Fortify Software Security Center (SSC), Remote Unauthorized Access (CVSS 6.5)
- [CVE-2018-17952](https://cve.now/CVE-2018-17952.md): Cross site scripting vulnerability in eDirectory prior to 9.1 SP2 (no CVSS)
- [CVE-2018-17950](https://cve.now/CVE-2018-17950.md): Incorrect enforcement of authorization checks in eDirectory prior to 9.1 SP2 (no CVSS)
- [CVE-2018-17949](https://cve.now/CVE-2018-17949.md): Cross site scripting vulnerability in iManager prior to 3.1 SP2. (no CVSS)
- [CVE-2018-18591](https://cve.now/CVE-2018-18591.md): MFSBGN03823 rev.1 - Micro Focus Service Manager, unauthorized disclosure of data (CVSS 6.8)
- [CVE-2018-18590](https://cve.now/CVE-2018-18590.md): MFSBGN03829 rev.1 - Micro Focus Operation Bridge Containerized Suite, Remote Code Execution (CVSS 9.6)
- [CVE-2018-18589](https://cve.now/CVE-2018-18589.md): MFSBGN03827 rev.1 - Microfocus Real User Monitoring 9.4.0 BPRDownload Java Deserialization Vulnerability (CVSS 6.3)
- [CVE-2018-12469](https://cve.now/CVE-2018-12469.md): Incorrect handling of an invalid value for an HTTP request parameter by Directory Server (aka Enterprise Server Administration web UI) in Mi (no CVSS)
- [CVE-2018-6505](https://cve.now/CVE-2018-6505.md): MFSBGN03824 rev.1 - ArcSight Management Center, Insufficient Access Control, Reflected Cross Site Scripting, Access Control vulnerability, Cross-Site Request Forgery (CSRF), Unauthenticated File Download, Directory Traversal Vulnerability (CVSS 7.5)
- [CVE-2018-6504](https://cve.now/CVE-2018-6504.md): MFSBGN03824 rev.1 - ArcSight Management Center, Insufficient Access Control, Reflected Cross Site Scripting, Access Control vulnerability, Cross-Site Request Forgery (CSRF), Unauthenticated File Download, Directory Traversal Vulnerability (CVSS 8.8)
- [CVE-2018-6503](https://cve.now/CVE-2018-6503.md): MFSBGN03824 rev.1 - ArcSight Management Center, Insufficient Access Control, Reflected Cross Site Scripting, Access Control vulnerability, Cross-Site Request Forgery (CSRF), Unauthenticated File Download, Directory Traversal Vulnerability (CVSS 6.5)
- [CVE-2018-6502](https://cve.now/CVE-2018-6502.md): MFSBGN03824 rev.1 - ArcSight Management Center, Insufficient Access Control, Reflected Cross Site Scripting, Access Control vulnerability, Cross-Site Request Forgery (CSRF), Unauthenticated File Download, Directory Traversal Vulnerability (CVSS 6.5)
- [CVE-2018-6500](https://cve.now/CVE-2018-6500.md): MFSBGN03824 rev.1 - ArcSight Management Center, Insufficient Access Control, Reflected Cross Site Scripting, Access Control vulnerability, Cross-Site Request Forgery (CSRF), Unauthenticated File Download, Directory Traversal Vulnerability (CVSS 7.5)
- [CVE-2018-6499](https://cve.now/CVE-2018-6499.md): Remote Code Execution in the following products Hybrid Cloud Management Containerized Suite HCM2017.11, HCM2018.02, HCM2018.05, Operations B (CVSS 7.1)
- [CVE-2018-6498](https://cve.now/CVE-2018-6498.md): Micro Focus Container Deployment Foundation (CDF), Remote Code Execution (CVSS 8.8)
- [CVE-2018-7692](https://cve.now/CVE-2018-7692.md): Unvalidated redirect vulnerability in in NetIQ eDirectory before 9.1.1 HF1. (no CVSS)
- [CVE-2018-7686](https://cve.now/CVE-2018-7686.md): Information leakage vulnerability in NetIQ eDirectory before 9.1.1 HF1 due to shared memory usage. (no CVSS)
- [CVE-2018-12468](https://cve.now/CVE-2018-12468.md): Arbitrary File Upload in GroupWise Administration Console (CVSS 9.1)
- [CVE-2018-12463](https://cve.now/CVE-2018-12463.md): MFSBGN03811 rev.1 - Fortify Software Security Center (SSC), Multiple vulnerabilities (CVSS 7.3)
- [CVE-2018-12465](https://cve.now/CVE-2018-12465.md): Remote Code Execution in Micro Focus Secure Messaging Gateway (CVSS 9.1)
- [CVE-2018-12464](https://cve.now/CVE-2018-12464.md): Unauthenticated SQL injection in Micro Focus Secure Messaging Gateway (CVSS 10.0)
- [CVE-2018-7682](https://cve.now/CVE-2018-7682.md): Micro Focus Solutions Business Manager versions prior to 11.4 allows a user to invoke SBM RESTful services across domains. (no CVSS)
- [CVE-2018-7683](https://cve.now/CVE-2018-7683.md): Micro Focus Solutions Business Manager versions prior to 11.4 might reveal certain sensitive information in server log files. (no CVSS)
- [CVE-2018-7681](https://cve.now/CVE-2018-7681.md): Micro Focus Solutions Business Manager versions prior to 11.4 allows JavaScript to be embedded in URLs placed in "Favorites" folder. (no CVSS)
- [CVE-2018-7680](https://cve.now/CVE-2018-7680.md): Micro Focus Solutions Business Manager versions prior to 11.4 can reflect back HTTP header values. (no CVSS)
- [CVE-2018-7679](https://cve.now/CVE-2018-7679.md): Micro Focus Solutions Business Manager versions prior to 11.4 when ASP.NET is configured with execute permission on the virtual directories (no CVSS)
- [CVE-2018-6497](https://cve.now/CVE-2018-6497.md): MFSBGN03810 rev.1 - Universal CMDB, Deserialization Java Objects and CSRF (CVSS 7.5)
- [CVE-2018-6496](https://cve.now/CVE-2018-6496.md): MFSBGN03809 rev.1 - Universal CMDB, Deserialization Java Objects and CSRF (CVSS 7.5)
- [CVE-2018-6495](https://cve.now/CVE-2018-6495.md): MFSBGN03808 rev.1 - Micro Focus UCMDB, Cross-Site Scripting (CVSS 6.3)
- [CVE-2018-6493](https://cve.now/CVE-2018-6493.md): MFSBGN03806 rev.1 - HP Network Automation Software, Network Operations Management (NOM) Suite, Multiple Vulnerabilities (CVSS 8.7)
- [CVE-2018-6492](https://cve.now/CVE-2018-6492.md): MFSBGN03806 rev.1 - HP Network Automation Software, Network Operations Management (NOM) Suite, Multiple Vulnerabilities (CVSS 4.7)
- [CVE-2018-6494](https://cve.now/CVE-2018-6494.md): MFSBGN03807 rev.1 - HP Service Manager Software, Multiple Vulnerabilities (CVSS 6.4)
- [CVE-2018-7687](https://cve.now/CVE-2018-7687.md): Client for OES Elevation of Privilege via Buffer Overflow (CVSS 7.8)
- [CVE-2018-6491](https://cve.now/CVE-2018-6491.md): MFSBGN03803 rev.1 - UCMDB, Installation File Access Control Privilege Escalation Vulnerability (CVSS 8.1)
- [CVE-2018-1343](https://cve.now/CVE-2018-1343.md): PAM exposure enabling unauthenticated access to remote host (no CVSS)
- [CVE-2018-6490](https://cve.now/CVE-2018-6490.md): MFSBGN03801 rev.1 - Micro Focus Operations Orchestration, Remote Denial of Service (DoS) (CVSS 5.9)
- [CVE-2018-6488](https://cve.now/CVE-2018-6488.md): MFSBGN03798 rev.1 - Micro Focus Universal CMDB, Apache Struts Instance (CVSS 8.1)
- [CVE-2018-6487](https://cve.now/CVE-2018-6487.md): MFSBGN03799 rev.1 - Micro Focus UCMDB, Remote Disclosure of Information (CVSS 9.8)
- [CVE-2018-6486](https://cve.now/CVE-2018-6486.md): MFSBGN03797 rev.1 - Micro Focus Fortify Audit Workbench (AWB) and Micro Focus Fortify Software Security Center (SSC), XML External Entity Injection (CVSS 7.3)
- [CVE-2018-1342](https://cve.now/CVE-2018-1342.md): A Vulnerability exists on Admin Console where an attacker can upload files to the Admin Console server, and potentially execute them. (no CVSS)
- [CVE-2017-14803](https://cve.now/CVE-2017-14803.md): In NetIQ Access Manager 4.3 and 4.4, a bug exists in Identity Server when accessing a basic SSO connector and downloading the BasicSSO conne (no CVSS)
- [CVE-2017-14363](https://cve.now/CVE-2017-14363.md): MFSBGN03795 rev.1 - Micro Focus Operations Manager i - Remote Cross-Site Scripting (XSS) (CVSS 5.9)
- [CVE-2017-14362](https://cve.now/CVE-2017-14362.md): MFSBGN03793 rev.1 - Project and Portfolio Management Center, Multiple vulnerabilities (CVSS 7.3)
- [CVE-2017-14361](https://cve.now/CVE-2017-14361.md): MFSBGN03793 rev.1 - Project and Portfolio Management Center, Multiple vulnerabilities (CVSS 7.4)
- [CVE-2017-14360](https://cve.now/CVE-2017-14360.md): MFSBGN03791 rev.1 - HPE Content Manager Workgroup Service, Denial of Service (DoS) (CVSS 5.9)
- [CVE-2017-14359](https://cve.now/CVE-2017-14359.md): MFSBGN03788 rev.1 - HPE Performance Center, Remote Cross-Site Scripting (XSS) (no CVSS)
- [CVE-2017-14358](https://cve.now/CVE-2017-14358.md): A URL redirection to untrusted site vulnerability in HP ArcSight ESM and HP ArcSight ESM Express, in any 6.x version prior to 6.9.1c Patch 4 (no CVSS)
- [CVE-2017-14357](https://cve.now/CVE-2017-14357.md): A Reflected and Stored Cross-Site Scripting (XSS) vulnerability in HP ArcSight ESM and HP ArcSight ESM Express, in any 6.x version prior to (no CVSS)
- [CVE-2017-14356](https://cve.now/CVE-2017-14356.md): An SQL Injection vulnerability in HP ArcSight ESM and HP ArcSight ESM Express, in any 6.x version prior to 6.9.1c Patch 4 or 6.11.0 Patch 1. (no CVSS)
- [CVE-2017-8994](https://cve.now/CVE-2017-8994.md): A input validation vulnerability in HPE Operations Orchestration product all versions prior to 10.80, allows for the execution of code remot (no CVSS)
- [CVE-2017-14350](https://cve.now/CVE-2017-14350.md): A potential security vulnerability has been identified in HPE Application Performance Management (BSM) Platform versions 9.26, 9.30, 9.40. (no CVSS)
- [CVE-2017-9283](https://cve.now/CVE-2017-9283.md): An out-of-bounds read (CWE-125) vulnerability exists in Micro Focus VisiBroker 8.5. (no CVSS)
- [CVE-2017-9282](https://cve.now/CVE-2017-9282.md): An integer overflow (CWE-190) led to an out-of-bounds write (CWE-787) on a heap-allocated area, leading to heap corruption in Micro Focus Vi (no CVSS)
- [CVE-2017-7424](https://cve.now/CVE-2017-7424.md): A Path Traversal (CWE-22) vulnerability in esfadmingui in Micro Focus Enterprise Developer and Enterprise Server 2.3, 2.3 Update 1 before Ho (no CVSS)
- [CVE-2017-7423](https://cve.now/CVE-2017-7423.md): A Cross-Site Request Forgery (CWE-352) vulnerability in esfadmingui in Micro Focus Enterprise Developer and Enterprise Server 2.3, 2.3 Updat (no CVSS)
- [CVE-2017-7422](https://cve.now/CVE-2017-7422.md): Reflected and stored Cross-Site Scripting (XSS, CWE-79) vulnerabilities in esfadmingui in Micro Focus Enterprise Developer and Enterprise Se (no CVSS)
- [CVE-2017-7421](https://cve.now/CVE-2017-7421.md): Reflected and stored Cross-Site Scripting (XSS, CWE-79) vulnerabilities in Directory Server (aka Enterprise Server Administration web UI) an (no CVSS)
- [CVE-2017-7420](https://cve.now/CVE-2017-7420.md): An Authentication Bypass (CWE-287) vulnerability in ESMAC (aka Enterprise Server Monitor and Control) in Micro Focus Enterprise Developer an (no CVSS)
- [CVE-2017-5187](https://cve.now/CVE-2017-5187.md): A Cross-Site Request Forgery (CWE-352) vulnerability in Directory Server (aka Enterprise Server Administration web UI) in Micro Focus Enterp (no CVSS)
- [CVE-2011-0469](https://cve.now/CVE-2011-0469.md): Code injection in openSUSE when running some source services used in the open build service 2.1 before March 11 2011. (no CVSS)
- [CVE-2017-7433](https://cve.now/CVE-2017-7433.md): An absolute path traversal vulnerability (CWE-36) in Micro Focus Vibe 4.0.2 and earlier allows a remote authenticated attacker to download a (no CVSS)
- [CVE-2016-9176](https://cve.now/CVE-2016-9176.md): Stack buffer overflow in the send.exe and receive.exe components of Micro Focus Rumba 9.4 and earlier could be used by local attackers or at (no CVSS)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/vendors/micro-focus
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.