Micro Focus vulnerabilities
127 CVEs and advisories name Micro Focus as an affected vendor, newest first. Follow it as a feed.
- CVE-2020-11860Cross-Site Scripting vulnerability on Micro Focus ArcSight Logger product, affecting all version prior to 7.1.1.
- CVE-2020-25834Cross-Site Scripting vulnerability on Micro Focus ArcSight Logger product, affecting version 7.1.
- CVE-2020-11858Code execution with escalated privilegesn vlnerability in Operation bridge Manager and Operations Bridge (containerized) products.
- CVE-2020-11854Arbitrary code execution vlnerability in Operation bridge Manager, Application Performance Management and Operations Bridge (containerized) products.
- CVE-2020-11853Arbitrary code execution vulnerability on multiple Micro Focus products
- CVE-2020-11844Incorrect Authorization vulnerability in the Micro Focus Container Deployment Foundation affecting multiple products.
- CVE-2019-11662Class and method names in error message in Micro Focus Service Manager product versions 9.30, 9.31, 9.32, 9.33, 9.34, 9.35, 9.40, 9.41, 9.50
- CVE-2019-11661Allow changes to some table by non-SysAdmin in Micro Focus Service Manager product versions 9.30, 9.31, 9.32, 9.33, 9.34, 9.35, 9.40, 9.41,
- CVE-2019-11664Clear text password in browser in Micro Focus Service Manager product versions 9.30, 9.31, 9.32, 9.33, 9.34, 9.35, 9.40, 9.41, 9.50, 9.51, 9
- CVE-2019-11663Clear text credentials are used to access managers app in Tomcat in Micro Focus Service Manager product versions 9.30, 9.31, 9.32, 9.33, 9.3
- CVE-2019-11665Data exposure in Micro Focus Service Manager product versions 9.30, 9.31, 9.32, 9.33, 9.34, 9.35, 9.40, 9.41, 9.50, 9.51, 9.52, 9.60, 9.61,
- CVE-2019-11666Insecure deserialization of untrusted data in Micro Focus Service Manager product versions 9.30, 9.31, 9.32, 9.33, 9.34, 9.35, 9.40, 9.41, 9
- CVE-2019-11667Unauthorized access to contact information in Micro Focus Service Manager, versions 9.41, 9.50, 9.51, 9.52, 9.60, 9.61, 9.62.
- CVE-2019-11669Modifiable read only check box In Micro Focus Service Manager, versions 9.60p1, 9.61, 9.62.
- CVE-2019-11658Information exposure in Micro Focus Content Manager, versions 9.1, 9.2 and 9.3.
- CVE-2019-11654A path traversal vulnerability has been identified in Verastream Host Integrator
- CVE-2019-11652A potential authorization bypass issue was found in Micro Focus Self Service Password Reset (SSPR) versions prior to: 4.4.0.3, 4.3.0.6, and
- CVE-2019-11653Remote Access Control Bypass in Micro Focus Content Manager.
- CVE-2019-3486ArcSight Security Management Center stored cross site script issue in version prior to 2.9.1
- CVE-2019-3485ArcSight Logger stored cross site script issue in version prior to 6.7.1
- CVE-2019-11650A potential Man in the Middle attack (MITM) was found in NetIQ Advanced Authentication Framework versions prior to 6.0.
- CVE-2019-11648An information leakage exists in Micro Focus NetIQ Self Service Password Reset Software all versions prior to version 4.4.
- CVE-2019-11647A potential XSS exists in Self Service Password Reset, in Micro Focus NetIQ Software all versions prior to version 4.4.
- CVE-2019-11649KM03461174 Micro Focus Fortify Software Security Center Server, CVE-2019-11649
- CVE-2019-3477Micro Focus Solution Business Manager versions prior to 11.4.2 is susceptible to open redirect.
- CVE-2019-3493A potential security vulnerability has been identified in Micro Focus Network Automation Software 9.20, 9.21, 10.00, 10.10, 10.20, 10.30, 10
- CVE-2019-3489An unauthenticated file upload vulnerability has been identified in the Web Client component of Micro Focus Content Manager 9.1, 9.2, and 9.
- CVE-2018-19643Solutions Business Manager (SBM) Information Leakage issue in version prior to 11.5
- CVE-2018-19644Solutions Business Manager (SBM) reflected cross site script issue in version prior to 11.5
- CVE-2018-19642Solutions Business Manager (SBM) Denial of Service issue in version prior to 11.5