Skip to content
OpenAdvisories

Vendor

Micro Focus

127 known vulnerabilities.

Products

Service Manager 8 Micro Focus Enterprise Developer, Micro Focus Enterprise Server 7 Solutions Business Manager 7 NetIQ Access Manager 7 ArcSight Management Center 6 Solutions Business Manager 11.4 5 Solutions Business Manager (SBM) 4 ArcSight Logger 4 Filr 3 Dimensions CM 3 Operation Bridge Manager 3 HP ArcSight ESM 3 HP ArcSight ESM Express 3 Secure Messaging Gateway 2 Micro Focus VisiBroker 2 NetIQ eDirectory 9.1 SP2 2 Content Manager 2 Micro Focus NetIQ Self Service Password Reset. 2 Hybrid Cloud Management 2 Micro Focus ArcSight Logger 2 Application Performance Management 2 Operation Bridge (containerized) 2 Network Operations Management Ultimate 2 Network Automation 2 Universal CMDB 2 Network Operations Management (NOM) Suite CDF 2 Service Management Automation Suite 2 Data Center Automation Containerized Suite 2 Operations Bridge Containerized Suite 2 Hybrid Cloud Management Containerized Suite 2 Project and Portfolio Management Center 2 UCMDB Browser 2 Fortify Software Security Center (SSC) 2 Advanced Authentication 1 Vibe 1 Enterprise Server 1 Enterprise Test Server 1 Enterprise Developer 1 Visual COBOL 1 NetIQ Privileged Account Manager (PAM) 3.1 and 3.2 1
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • Critical 9.8
    CVE-2020-11854 Public exploit Scanner template EPSS 74%

    Arbitrary code execution vlnerability in Operation bridge Manager, Application Performance Management and Operations Bridge (containerized) products.

    Arbitrary code execution vlnerability in Operation bridge Manager, Application Performance Management and Operations Bridge (containerized) vulnerability in Micro Focus products products Operation Bridge Manager, Operation Bridge (containerized) and Applicati…

    Micro Focus Operation Bridge Manager Application Performance Management Operation Bridge (containerized)
  • Critical 10.0
    CVE-2020-11844

    Incorrect Authorization vulnerability in the Micro Focus Container Deployment Foundation affecting multiple products.

    Incorrect Authorization vulnerability in Micro Focus Container Deployment Foundation component affects products: - Hybrid Cloud Management. Versions 2018.05 to 2019.11. - ArcSight Investigate. versions 2.4.0, 3.0.0 and 3.1.0. - ArcSight Transformation Hub. ve…

    Micro Focus Hybrid Cloud Management ArcSight Interset Service Management Automation (SMA)
  • Critical 9.6
    CVE-2018-18590

    MFSBGN03829 rev.1 - Micro Focus Operation Bridge Containerized Suite, Remote Code Execution

    A potential remote code execution and information disclosure vulnerability exists in Micro Focus Operations Bridge containerized suite versions 2017.11, 2018.02, 2018.05, 2018.08. This vulnerability could allow for information disclosure.

    Micro Focus Operation Bridge Containerized Suite
  • Critical 9.1
    CVE-2018-12468

    Arbitrary File Upload in GroupWise Administration Console

    A vulnerability in the administration console of Micro Focus GroupWise prior to version 18.0.2 may allow a remote attacker authenticated as an administrator to upload files to an arbitrary path on the server. In certain circumstances this could result in remo…

    Micro Focus GroupWise
  • Critical 9.1
    CVE-2018-12465 Public exploit EPSS 80%

    Remote Code Execution in Micro Focus Secure Messaging Gateway

    An OS command injection vulnerability in the web administration component of Micro Focus Secure Messaging Gateway (SMG) allows a remote attacker authenticated as a privileged user to execute arbitrary OS commands on the SMG server. This can be exploited in co…

    Micro Focus Secure Messaging Gateway
  • Critical 10.0
    CVE-2018-12464 Public exploit EPSS 81%

    Unauthenticated SQL injection in Micro Focus Secure Messaging Gateway

    A SQL injection vulnerability in the web administration and quarantine components of Micro Focus Secure Messaging Gateway allows an unauthenticated remote attacker to execute arbitrary SQL statements against the database. This can be exploited to create an ad…

    Micro Focus Secure Messaging Gateway
  • Critical 9.8
    CVE-2018-6487

    MFSBGN03799 rev.1 - Micro Focus UCMDB, Remote Disclosure of Information

    Remote Disclosure of Information in Micro Focus Universal CMDB Foundation Software, version numbers 10.10, 10.11, 10.20, 10.21, 10.22, 10.30, 10.31, 4.10, 4.11. This vulnerability could be remotely exploited to allow disclosure of information.

    Micro Focus Universal CMDB Foundation Software