Micro Focus vulnerabilities
127 CVEs and advisories name Micro Focus as an affected vendor, newest first. Follow it as a feed.
- CVE-2018-7679Micro Focus Solutions Business Manager versions prior to 11.4 when ASP.NET is configured with execute permission on the virtual directories
- CVE-2018-6497MFSBGN03810 rev.1 - Universal CMDB, Deserialization Java Objects and CSRF
- CVE-2018-6496MFSBGN03809 rev.1 - Universal CMDB, Deserialization Java Objects and CSRF
- CVE-2018-6495MFSBGN03808 rev.1 - Micro Focus UCMDB, Cross-Site Scripting
- CVE-2018-6493MFSBGN03806 rev.1 - HP Network Automation Software, Network Operations Management (NOM) Suite, Multiple Vulnerabilities
- CVE-2018-6492MFSBGN03806 rev.1 - HP Network Automation Software, Network Operations Management (NOM) Suite, Multiple Vulnerabilities
- CVE-2018-6494MFSBGN03807 rev.1 - HP Service Manager Software, Multiple Vulnerabilities
- CVE-2018-7687Client for OES Elevation of Privilege via Buffer Overflow
- CVE-2018-6491MFSBGN03803 rev.1 - UCMDB, Installation File Access Control Privilege Escalation Vulnerability
- CVE-2018-1343PAM exposure enabling unauthenticated access to remote host
- CVE-2018-6490MFSBGN03801 rev.1 - Micro Focus Operations Orchestration, Remote Denial of Service (DoS)
- CVE-2018-6488MFSBGN03798 rev.1 - Micro Focus Universal CMDB, Apache Struts Instance
- CVE-2018-6487MFSBGN03799 rev.1 - Micro Focus UCMDB, Remote Disclosure of Information
- CVE-2018-6486MFSBGN03797 rev.1 - Micro Focus Fortify Audit Workbench (AWB) and Micro Focus Fortify Software Security Center (SSC), XML External Entity Injection
- CVE-2018-1342A Vulnerability exists on Admin Console where an attacker can upload files to the Admin Console server, and potentially execute them.
- CVE-2017-14803In NetIQ Access Manager 4.3 and 4.4, a bug exists in Identity Server when accessing a basic SSO connector and downloading the BasicSSO conne
- CVE-2017-14363MFSBGN03795 rev.1 - Micro Focus Operations Manager i - Remote Cross-Site Scripting (XSS)
- CVE-2017-14362MFSBGN03793 rev.1 - Project and Portfolio Management Center, Multiple vulnerabilities
- CVE-2017-14361MFSBGN03793 rev.1 - Project and Portfolio Management Center, Multiple vulnerabilities
- CVE-2017-14360MFSBGN03791 rev.1 - HPE Content Manager Workgroup Service, Denial of Service (DoS)
- CVE-2017-14359MFSBGN03788 rev.1 - HPE Performance Center, Remote Cross-Site Scripting (XSS)
- CVE-2017-14358A URL redirection to untrusted site vulnerability in HP ArcSight ESM and HP ArcSight ESM Express, in any 6.x version prior to 6.9.1c Patch 4
- CVE-2017-14357A Reflected and Stored Cross-Site Scripting (XSS) vulnerability in HP ArcSight ESM and HP ArcSight ESM Express, in any 6.x version prior to
- CVE-2017-14356An SQL Injection vulnerability in HP ArcSight ESM and HP ArcSight ESM Express, in any 6.x version prior to 6.9.1c Patch 4 or 6.11.0 Patch 1.
- CVE-2017-8994A input validation vulnerability in HPE Operations Orchestration product all versions prior to 10.80, allows for the execution of code remot
- CVE-2017-14350A potential security vulnerability has been identified in HPE Application Performance Management (BSM) Platform versions 9.26, 9.30, 9.40.
- CVE-2017-9283An out-of-bounds read (CWE-125) vulnerability exists in Micro Focus VisiBroker 8.5.
- CVE-2017-9282An integer overflow (CWE-190) led to an out-of-bounds write (CWE-787) on a heap-allocated area, leading to heap corruption in Micro Focus Vi
- CVE-2017-7424A Path Traversal (CWE-22) vulnerability in esfadmingui in Micro Focus Enterprise Developer and Enterprise Server 2.3, 2.3 Update 1 before Ho
- CVE-2017-7423A Cross-Site Request Forgery (CWE-352) vulnerability in esfadmingui in Micro Focus Enterprise Developer and Enterprise Server 2.3, 2.3 Updat