Micro Focus vulnerabilities
127 CVEs and advisories name Micro Focus as an affected vendor, newest first. Follow it as a feed.
- CVE-2018-19641Solutions Business Manager (SBM) Unauthenticated remote code execution issue in version prior to 11.5
- CVE-2019-3475Local privilege escalation in Filr famtd
- CVE-2019-3474Path traversal vulnerability in Filr web application
- CVE-2018-18593MFSBGN03838 rev.1 - UCMDB Configuration Management Service, Multiple Vulnerabilities
- CVE-2018-7691MFSBGN03835 rev.1 - Fortify Software Security Center (SSC), Remote Unauthorized Access
- CVE-2018-7690MFSBGN03835 rev.1 - Fortify Software Security Center (SSC), Remote Unauthorized Access
- CVE-2018-17952Cross site scripting vulnerability in eDirectory prior to 9.1 SP2
- CVE-2018-17950Incorrect enforcement of authorization checks in eDirectory prior to 9.1 SP2
- CVE-2018-17949Cross site scripting vulnerability in iManager prior to 3.1 SP2.
- CVE-2018-18591MFSBGN03823 rev.1 - Micro Focus Service Manager, unauthorized disclosure of data
- CVE-2018-18590MFSBGN03829 rev.1 - Micro Focus Operation Bridge Containerized Suite, Remote Code Execution
- CVE-2018-18589MFSBGN03827 rev.1 - Microfocus Real User Monitoring 9.4.0 BPRDownload Java Deserialization Vulnerability
- CVE-2018-12469Incorrect handling of an invalid value for an HTTP request parameter by Directory Server (aka Enterprise Server Administration web UI) in Mi
- CVE-2018-6505MFSBGN03824 rev.1 - ArcSight Management Center, Insufficient Access Control, Reflected Cross Site Scripting, Access Control vulnerability, Cross-Site Request Forgery (CSRF), Unauthenticated File Download, Directory Traversal Vulnerability
- CVE-2018-6504MFSBGN03824 rev.1 - ArcSight Management Center, Insufficient Access Control, Reflected Cross Site Scripting, Access Control vulnerability, Cross-Site Request Forgery (CSRF), Unauthenticated File Download, Directory Traversal Vulnerability
- CVE-2018-6503MFSBGN03824 rev.1 - ArcSight Management Center, Insufficient Access Control, Reflected Cross Site Scripting, Access Control vulnerability, Cross-Site Request Forgery (CSRF), Unauthenticated File Download, Directory Traversal Vulnerability
- CVE-2018-6502MFSBGN03824 rev.1 - ArcSight Management Center, Insufficient Access Control, Reflected Cross Site Scripting, Access Control vulnerability, Cross-Site Request Forgery (CSRF), Unauthenticated File Download, Directory Traversal Vulnerability
- CVE-2018-6500MFSBGN03824 rev.1 - ArcSight Management Center, Insufficient Access Control, Reflected Cross Site Scripting, Access Control vulnerability, Cross-Site Request Forgery (CSRF), Unauthenticated File Download, Directory Traversal Vulnerability
- CVE-2018-6499Remote Code Execution in the following products Hybrid Cloud Management Containerized Suite HCM2017.11, HCM2018.02, HCM2018.05, Operations B
- CVE-2018-6498Micro Focus Container Deployment Foundation (CDF), Remote Code Execution
- CVE-2018-7692Unvalidated redirect vulnerability in in NetIQ eDirectory before 9.1.1 HF1.
- CVE-2018-7686Information leakage vulnerability in NetIQ eDirectory before 9.1.1 HF1 due to shared memory usage.
- CVE-2018-12468Arbitrary File Upload in GroupWise Administration Console
- CVE-2018-12463MFSBGN03811 rev.1 - Fortify Software Security Center (SSC), Multiple vulnerabilities
- CVE-2018-12465Remote Code Execution in Micro Focus Secure Messaging Gateway
- CVE-2018-12464Unauthenticated SQL injection in Micro Focus Secure Messaging Gateway
- CVE-2018-7682Micro Focus Solutions Business Manager versions prior to 11.4 allows a user to invoke SBM RESTful services across domains.
- CVE-2018-7683Micro Focus Solutions Business Manager versions prior to 11.4 might reveal certain sensitive information in server log files.
- CVE-2018-7681Micro Focus Solutions Business Manager versions prior to 11.4 allows JavaScript to be embedded in URLs placed in "Favorites" folder.
- CVE-2018-7680Micro Focus Solutions Business Manager versions prior to 11.4 can reflect back HTTP header values.