Skip to content
OpenAdvisories

Vendor

Micro Focus

127 known vulnerabilities.

Micro Focus at a glance

Last 12 months
0
Critical · all time
7
Exploited · all time
0
Public exploit · all time
11
New vulnerabilities per month · last 12 months
0 1 1 December 2025: 0 vulnerabilities Dec 2025 January 2026: 0 vulnerabilities February 2026: 0 vulnerabilities March 2026: 0 vulnerabilities Mar April 2026: 0 vulnerabilities May 2026: 0 vulnerabilities June 2026: 0 vulnerabilities Jun July 2026: 0 vulnerabilities August 2026: 0 vulnerabilities September 2026: 0 vulnerabilities Sep October 2026: 0 vulnerabilities November 2026: 0 vulnerabilities
Show as table
MonthVulnerabilitiesCritical
Nov 202600
Oct 202600
Sep 202600
Aug 202600
Jul 202600
Jun 202600
May 202600
Apr 202600
Mar 202600
Feb 202600
Jan 202600
Dec 202500
Nov 202500
Oct 202500
Sep 202500
Aug 202500
Jul 202500
Jun 202500
May 202500
Apr 202500
Mar 202500
Feb 202500
Jan 202500
Dec 202400

Products

Service Manager 8 Micro Focus Enterprise Developer, Micro Focus Enterprise Server 7 Solutions Business Manager 7 NetIQ Access Manager 7 ArcSight Management Center 6 Solutions Business Manager 11.4 5 Solutions Business Manager (SBM) 4 ArcSight Logger 4 Filr 3 Dimensions CM 3 Operation Bridge Manager 3 HP ArcSight ESM 3 HP ArcSight ESM Express 3 Secure Messaging Gateway 2 Micro Focus VisiBroker 2 NetIQ eDirectory 9.1 SP2 2 Content Manager 2 Micro Focus NetIQ Self Service Password Reset. 2 Hybrid Cloud Management 2 Micro Focus ArcSight Logger 2 Application Performance Management 2 Operation Bridge (containerized) 2 Network Operations Management Ultimate 2 Network Automation 2 Universal CMDB 2 Network Operations Management (NOM) Suite CDF 2 Service Management Automation Suite 2 Data Center Automation Containerized Suite 2 Operations Bridge Containerized Suite 2 Hybrid Cloud Management Containerized Suite 2 Project and Portfolio Management Center 2 UCMDB Browser 2 Fortify Software Security Center (SSC) 2 Advanced Authentication 1 Vibe 1 Enterprise Server 1 Enterprise Test Server 1 Enterprise Developer 1 Visual COBOL 1 NetIQ Privileged Account Manager (PAM) 3.1 and 3.2 1

Latest advisories

  • High max 9.0
    WID-SEC-2024-1578 1 CVE rev. 39

    RADIUS: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen

    Ein lokaler Angreifer kann eine Schwachstelle im RADIUS Protokoll ausnutzen, um Sicherheitsvorkehrungen zu umgehen.

    Oracle IBM Cisco Red Hat Siemens Linux
    first Jul 9, 2024
  • High max 9.8
    WID-SEC-2024-0677 1 CVE rev. 2

    Micro Focus ArcSight: Schwachstelle ermöglicht Codeausführung

    Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Micro Focus ArcSight ausnutzen, um beliebigen Programmcode auszuführen.

    Micro Focus Linux
    first Mar 20, 2024
  • High max 8.7
    WID-SEC-2024-1185 1 CVE

    Micro Focus ArcSight: Schwachstelle ermöglicht Cross-Site Scripting

    Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in Micro Focus ArcSight ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen.

    Micro Focus Linux Windows
  • Medium max 4.3
    WID-SEC-2024-0532 1 CVE

    Micro Focus ArcSight: Schwachstelle ermöglicht Offenlegung von Informationen

    Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in Micro Focus ArcSight ausnutzen, um Informationen offenzulegen.

    Micro Focus Linux
  • High max 9.1
    WID-SEC-2023-2833 2 CVEs

    Micro Focus ArcSight: Mehrere Schwachstellen

    Ein entfernter authentifizierter Angreifer kann mehrere Schwachstellen in Micro Focus ArcSight ausnutzen, um einen Cross-Site-Scripting-Angriff zu starten oder einen Denial-of-Service-Zustand zu verursachen.

    Micro Focus Linux Windows
All Critical High Medium Low Exploited only Public exploit

127 results · Feed

  • Medium 5.9
    CVE-2020-25835

    Micro Focus ArcSight Management Center Remote Vulnerability

    A potential vulnerability has been identified in Micro Focus ArcSight Management Center. The vulnerability could be remotely exploited resulting in stored Cross-Site Scripting (XSS).

    Micro Focus ArcSight Management Center
  • High 7.1
    CVE-2023-32265

    Mitigations and availability of updates relating to security vulnerability in ESCWA component CVE-2023-32265.

    A potential security vulnerability has been identified in the Enterprise Server Common Web Administration (ESCWA) component used in Enterprise Server, Enterprise Test Server, Enterprise Developer, Visual COBOL, and COBOL Server. An attacker would need to be a…

    Micro Focus Enterprise Developer COBOL Server Enterprise Test Server
  • Low 2.6
    CVE-2023-32263

    Dimensions CM Plugin for Jenkins 0.8.17 – 0.9.3

    A potential vulnerability has been identified in the Micro Focus Dimensions CM Plugin for Jenkins. The vulnerability could be exploited to retrieve a login certificate if an authenticated user is duped into using an attacker-controlled Dimensions CM server. T…

    Micro Focus Dimensions CM org.jenkins-ci.plugins:dimensionsscm Maven
  • Medium 4.3
    CVE-2023-32262

    Dimensions CM Plugin for Jenkins 0.8.17 – 0.9.3

    A potential vulnerability has been identified in the Micro Focus Dimensions CM Plugin for Jenkins. The vulnerability allows attackers with Item/Configure permission to access and capture credentials they are not entitled to. See the following Jenkins security…

    Micro Focus Dimensions CM org.jenkins-ci.plugins:dimensionsscm Maven
  • Medium 4.2
    CVE-2023-32261

    Dimensions CM Plugin for Jenkins 0.8.17 – 0.9.3

    A potential vulnerability has been identified in the Micro Focus Dimensions CM Plugin for Jenkins. The vulnerability allows attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins. See the following Jenkins securit…

    Micro Focus Dimensions CM org.jenkins-ci.plugins:dimensionsscm Maven
  • High 7.2
    CVE-2022-38758

    XSS vulnerabilities in iManager

    Cross-site Scripting (XSS) vulnerability in NetIQ iManager prior to version 3.2.6 allows attacker to execute malicious scripts on the user's browser. This issue affects: Micro Focus NetIQ iManager NetIQ iManager versions prior to 3.2.6 on ALL.

    Micro Focus NetIQ iManager
  • Low 1.8
    CVE-2022-26329

    File existence disclosue vulnerability in IDM plugin

    File existence disclosure vulnerability in NetIQ Identity Manager plugin prior to version 4.8.5 allows attacker to determine whether a file exists on the filesystem. This issue affects: Micro Focus NetIQ Identity Manager NetIQ Identity Manager versions prior …

    Micro Focus NetIQ Identity Manager
  • High 7.2
    CVE-2022-38757

    CVE-2022-38757 ZENworks

    A vulnerability has been identified in Micro Focus ZENworks 2020 Update 3a and prior versions. This vulnerability allows administrators with rights to perform actions (e.g., install a bundle) on a set of managed devices, to be able to exercise these rights on…

    Micro Focus ZENworks Configuration Management (ZCM) ZENworks Endpoint Security Management (ZESM) ZENworks Asset Management
  • Medium 4.3
    CVE-2022-38756

    CVE-2022-38756 vulnerability in GW Web prior to 18.4.2

    A vulnerability has been identified in Micro Focus GroupWise Web in versions prior to 18.4.2. The GW Web component makes a request to the Post Office Agent that contains sensitive information in the query parameters that could be logged by any intervening HTT…

    Micro Focus Micro Focus GroupWise Web
  • High 8.0
    CVE-2022-38754

    CVE-2022-38754 - Micro Focus Operations Bridge Manager and OpsBridge Containerized - Cross Site Scripting (XSS)

    A potential vulnerability has been identified in Micro Focus Operations Bridge - Containerized. The vulnerability could be exploited by a malicious authenticated OBM (Operations Bridge Manager) user to run Java Scripts in the browser context of another OBM us…

    Micro Focus Micro Focus Operations Bridge Manager Micro Focus Operations Bridge- Containerized
  • Medium 5.3
    CVE-2022-38755

    Filr Remote unauthenticated user enumeration for versions prior to 4.3.1.1

    A vulnerability has been identified in Micro Focus Filr in versions prior to 4.3.1.1. The vulnerability could be exploited to allow a remote unauthenticated attacker to enumerate valid users of the system. Remote unauthenticated user enumeration. This issue a…

    Micro Focus Micro Focus Filr
  • Medium 6.1
    CVE-2022-26331

    Potential vulnerabilities have been identified in Micro Focus ArcSight Logger. The vulnerabilities could be remotely exploited resulting in Self Cross-Site Scripting (XSS).

    Potential vulnerabilities have been identified in Micro Focus ArcSight Logger. The vulnerabilities could be remotely exploited resulting in Information Disclosure, or Self Cross-Site Scripting (XSS). This issue affects: Micro Focus ArcSight Logger versions pr…

    Micro Focus Micro Focus ArcSight Logger
  • Medium 6.5
    CVE-2022-26330

    Potential vulnerability has been identified in Micro Focus ArcSight Logger. The vulnerability could be remotely exploited resulting in Information Disclosure.

    Potential vulnerabilities have been identified in Micro Focus ArcSight Logger. The vulnerabilities could be remotely exploited resulting in Information Disclosure, or Self Cross-Site Scripting (XSS). This issue affects: Micro Focus ArcSight Logger versions pr…

    Micro Focus Micro Focus ArcSight Logger
  • Medium 4.0
    CVE-2022-26326

    Potential open redirection vulnerability in NetIQ Access Manager versions prior to version 5.0.2

    Potential open redirection vulnerability when URL is crafted in specific format in NetIQ Access Manager prior to 5.0.2

    Micro Focus NetIQ Access Manager
  • Low 2.9
    CVE-2022-26325

    Cross Site Scripting vulnerability in NetIQ Access Manager versions prior to version 5.0.2

    Reflected Cross Site Scripting (XSS) vulnerability in NetIQ Access Manager prior to 5.0.2

    Micro Focus NetIQ Access Manager
  • Medium 4.9
    CVE-2021-22526

    Open Redirection vulnerability in NetIQ Access Manager versions prior to version 4.5.4 and 5.0.1

    Open Redirection vulnerability in NetIQ Access Manager prior to 5.0.1 and 4.5.4

    Micro Focus NetIQ Access Manager
  • Medium 5.4
    CVE-2021-22524

    Denial of service vulnerability in NetIQ Access Manager versions prior to version 4.5.4 and 5.0.1

    Injection attack caused the denial of service vulnerability in NetIQ Access Manager prior to 5.0.1 and 4.5.4

    Micro Focus NetIQ Access Manager
  • Medium 6.0
    CVE-2021-22527

    Information leakage vulnerability in NetIQ Access Manager versions prior to version 4.5.4 and 5.0.1

    Information leakage vulnerability in NetIQ Access Manager prior to 5.0.1 and 4.5.4

    Micro Focus NetIQ Access Manager
  • High 8.0
    CVE-2021-22528

    Information leakage vulnerability in NetIQ Access Manager versions prior to version 4.5.4 and 5.0.1

    Reflected Cross Site Scripting (XSS) vulnerability in NetIQ Access Manager prior to 5.0.1 and 4.5.4

    Micro Focus NetIQ Access Manager
  • Medium 4.8
    CVE-2021-22515

    Multi-Factor Authentication (MFA) downgrade exposure in NetIQ Advanced Authentication Server

    Multi-Factor Authentication (MFA) functionality can be bypassed, allowing the use of single factor authentication in NetIQ Advanced Authentication versions prior to 6.3 SP4 Patch 1.

    Micro Focus NetIQ Advanced Authentication
  • Low 3.8
    CVE-2021-22497

    Advanced Authentication Improper Session Management

    Advanced Authentication versions prior to 6.3 SP4 have a potential broken authentication due to improper session management issue.

    Micro Focus Advanced Authentication
  • Medium 6.1
    CVE-2019-18943

    XML External Entity processing

    Micro Focus Solutions Business Manager versions prior to 11.7.1 are vulnerable to XML External Entity Processing (XXE) on certain operations.

    Micro Focus Solutions Business Manager
  • Medium 5.5
    CVE-2019-18942

    Stored cross site scripting

    Micro Focus Solutions Business Manager versions prior to 11.7.1 are vulnerable to stored XSS. The application reflects previously stored user input without encoding.

    Micro Focus Solutions Business Manager
  • Medium 4.9
    CVE-2019-18944

    Micro Focus Solutions Business Manager Application Repository versions prior to 11.7.1 are vulnerable to reflected XSS.

    Micro Focus Solutions Business Manager
  • High 7.3
    CVE-2019-18945

    privilege escalation

    Micro Focus Solutions Business Manager Application Repository versions prior to 11.7.1 are vulnerable to privilege escalation vulnerability.

    Micro Focus Solutions Business Manager
  • Low 3.5
    CVE-2019-18947

    information disclosure

    Micro Focus Solutions Business Manager Application Repository versions prior to 11.7.1 are vulnerable to information disclosure.

    Micro Focus Solutions Business Manager
  • Medium 4.8
    CVE-2019-18946

    Session fixation

    Micro Focus Solutions Business Manager Application Repository versions prior to 11.7.1 are vulnerable to session fixation.

    Micro Focus Solutions Business Manager
  • Unscored —
    CVE-2020-25833

    Persistent cross-Site Scripting vulnerability on Micro Focus IDOL product, affecting all version prior to version 12.7.…

    Micro Focus IDOL
  • Unscored —
    CVE-2020-25832

    Reflected Cross Site scripting vulnerability on Micro Focus Filr product, affecting version 4.2.1. The vulnerability co…

    Micro Focus Filr
  • Unscored —
    CVE-2020-11851 Public exploit

    Arbitrary code execution vulnerability on Micro Focus ArcSight Logger product, affecting all version prior to 7.1.1. Th…

    Micro Focus ArcSight Logger
  • Unscored —
    CVE-2020-11860

    Cross-Site Scripting vulnerability on Micro Focus ArcSight Logger product, affecting all version prior to 7.1.1. The vu…

    Micro Focus ArcSight Logger
  • Unscored —
    CVE-2020-25834

    Cross-Site Scripting vulnerability on Micro Focus ArcSight Logger product, affecting version 7.1. The vulnerability cou…

    Micro Focus ArcSight Logger
  • High 7.8
    CVE-2020-11858 Public exploit

    Code execution with escalated privilegesn vlnerability in Operation bridge Manager and Operations Bridge (containerized) products.

    Code execution with escalated privileges vulnerability in Micro Focus products Operation Bridge Manager and Operation Bridge (containerized). The vulneravility affects: 1.) Operation Bridge Manager versions: 2020.05, 2019.11, 2019.05, 2018.11, 2018.05, 10.63,…

    Micro Focus Operation Bridge Manager Operation Bridge (containerized)
  • Critical 9.8
    CVE-2020-11854 Public exploit EPSS 74%

    Arbitrary code execution vlnerability in Operation bridge Manager, Application Performance Management and Operations Bridge (containerized) products.

    Arbitrary code execution vlnerability in Operation bridge Manager, Application Performance Management and Operations Bridge (containerized) vulnerability in Micro Focus products products Operation Bridge Manager, Operation Bridge (containerized) and Applicati…

    Micro Focus Operation Bridge Manager Application Performance Management Operation Bridge (containerized)
  • High 8.8
    CVE-2020-11853 Public exploit EPSS 77%

    Arbitrary code execution vulnerability on multiple Micro Focus products

    Arbitrary code execution vulnerability affecting multiple Micro Focus products. 1.) Operation Bridge Manager affecting version: 2020.05, 2019.11, 2019.05, 2018.11, 2018.05, versions 10.6x and 10.1x and older versions. 2.) Application Performance Management af…

    Micro Focus Operation Bridge Manager Universal CMDB Hybrid Cloud Management
  • Critical 10.0
    CVE-2020-11844

    Incorrect Authorization vulnerability in the Micro Focus Container Deployment Foundation affecting multiple products.

    Incorrect Authorization vulnerability in Micro Focus Container Deployment Foundation component affects products: - Hybrid Cloud Management. Versions 2018.05 to 2019.11. - ArcSight Investigate. versions 2.4.0, 3.0.0 and 3.1.0. - ArcSight Transformation Hub. ve…

    Micro Focus Hybrid Cloud Management Identity Intelligence. versions ArcSight Transformation Hub
  • Unscored —
    CVE-2019-11662

    Class and method names in error message in Micro Focus Service Manager product versions 9.30, 9.31, 9.32, 9.33, 9.34, 9…

    Micro Focus Service Manager
  • Unscored —
    CVE-2019-11661

    Allow changes to some table by non-SysAdmin in Micro Focus Service Manager product versions 9.30, 9.31, 9.32, 9.33, 9.3…

    Micro Focus Service Manager
  • Unscored —
    CVE-2019-11664

    Clear text password in browser in Micro Focus Service Manager product versions 9.30, 9.31, 9.32, 9.33, 9.34, 9.35, 9.40…

    Micro Focus Service Manager
  • Unscored —
    CVE-2019-11663

    Clear text credentials are used to access managers app in Tomcat in Micro Focus Service Manager product versions 9.30, …

    Micro Focus Service Manager