Skip to content
OpenAdvisories

Vendor

Micro Focus

127 known vulnerabilities.

Products

Service Manager 8 Micro Focus Enterprise Developer, Micro Focus Enterprise Server 7 Solutions Business Manager 7 NetIQ Access Manager 7 ArcSight Management Center 6 Solutions Business Manager 11.4 5 Solutions Business Manager (SBM) 4 ArcSight Logger 4 Filr 3 Dimensions CM 3 Operation Bridge Manager 3 HP ArcSight ESM 3 HP ArcSight ESM Express 3 Secure Messaging Gateway 2 Micro Focus VisiBroker 2 NetIQ eDirectory 9.1 SP2 2 Content Manager 2 Micro Focus NetIQ Self Service Password Reset. 2 Hybrid Cloud Management 2 Micro Focus ArcSight Logger 2 Application Performance Management 2 Operation Bridge (containerized) 2 Network Operations Management Ultimate 2 Network Automation 2 Universal CMDB 2 Network Operations Management (NOM) Suite CDF 2 Service Management Automation Suite 2 Data Center Automation Containerized Suite 2 Operations Bridge Containerized Suite 2 Hybrid Cloud Management Containerized Suite 2 Project and Portfolio Management Center 2 UCMDB Browser 2 Fortify Software Security Center (SSC) 2 Advanced Authentication 1 Vibe 1 Enterprise Server 1 Enterprise Test Server 1 Enterprise Developer 1 Visual COBOL 1 NetIQ Privileged Account Manager (PAM) 3.1 and 3.2 1
All Critical High Medium Low Exploited only Public exploit

11 results · Clear filters · Feed

  • Unscored —
    CVE-2020-11851 Public exploit

    Arbitrary code execution vulnerability on Micro Focus ArcSight Logger product, affecting all version prior to 7.1.1. Th…

    Micro Focus ArcSight Logger
  • High 7.8
    CVE-2020-11858 Public exploit

    Code execution with escalated privilegesn vlnerability in Operation bridge Manager and Operations Bridge (containerized) products.

    Code execution with escalated privileges vulnerability in Micro Focus products Operation Bridge Manager and Operation Bridge (containerized). The vulneravility affects: 1.) Operation Bridge Manager versions: 2020.05, 2019.11, 2019.05, 2018.11, 2018.05, 10.63,…

    Micro Focus Operation Bridge Manager Operation Bridge (containerized)
  • Critical 9.8
    CVE-2020-11854 Public exploit EPSS 74%

    Arbitrary code execution vlnerability in Operation bridge Manager, Application Performance Management and Operations Bridge (containerized) products.

    Arbitrary code execution vlnerability in Operation bridge Manager, Application Performance Management and Operations Bridge (containerized) vulnerability in Micro Focus products products Operation Bridge Manager, Operation Bridge (containerized) and Applicati…

    Micro Focus Operation Bridge Manager Operation Bridge (containerized) Application Performance Management
  • High 8.8
    CVE-2020-11853 Public exploit EPSS 77%

    Arbitrary code execution vulnerability on multiple Micro Focus products

    Arbitrary code execution vulnerability affecting multiple Micro Focus products. 1.) Operation Bridge Manager affecting version: 2020.05, 2019.11, 2019.05, 2018.11, 2018.05, versions 10.6x and 10.1x and older versions. 2.) Application Performance Management af…

    Micro Focus Operation Bridge Manager Hybrid Cloud Management Application Performance Management
  • Medium 6.5
    CVE-2019-3474 Public exploit

    Path traversal vulnerability in Filr web application

    A path traversal vulnerability in the web application component of Micro Focus Filr 3.x allows a remote attacker authenticated as a low privilege user to download arbitrary files from the Filr server. This vulnerability affects all versions of Filr 3.x prior …

    Micro Focus Filr
  • High 7.8
    CVE-2019-3475 Public exploit

    Local privilege escalation in Filr famtd

    A local privilege escalation vulnerability in the famtd component of Micro Focus Filr 3.0 allows a local attacker authenticated as a low privilege user to escalate to root. This vulnerability affects all versions of Filr 3.x prior to Security Update 6.

    Micro Focus Filr
  • Medium 6.5
    CVE-2018-7691 Public exploit

    MFSBGN03835 rev.1 - Fortify Software Security Center (SSC), Remote Unauthorized Access

    A potential Remote Unauthorized Access in Micro Focus Fortify Software Security Center (SSC), versions 17.10, 17.20, 18.10 this exploitation could allow Remote Unauthorized Access

    Micro Focus Fortify Software Security Center (SSC)
  • Medium 6.5
    CVE-2018-7690 Public exploit

    MFSBGN03835 rev.1 - Fortify Software Security Center (SSC), Remote Unauthorized Access

    A potential Remote Unauthorized Access in Micro Focus Fortify Software Security Center (SSC), versions 17.10, 17.20, 18.10 this exploitation could allow Remote Unauthorized Access

    Micro Focus Fortify Software Security Center (SSC)
  • High 7.3
    CVE-2018-12463 Public exploit EPSS 14%

    MFSBGN03811 rev.1 - Fortify Software Security Center (SSC), Multiple vulnerabilities

    An XML external entity (XXE) vulnerability in Fortify Software Security Center (SSC), version 17.1, 17.2, 18.1 allows remote unauthenticated users to read arbitrary files or conduct server-side request forgery (SSRF) attacks via a crafted DTD in an XML reques…

    Micro Focus Fortify Software Security Center
  • Critical 9.1
    CVE-2018-12465 Public exploit EPSS 80%

    Remote Code Execution in Micro Focus Secure Messaging Gateway

    An OS command injection vulnerability in the web administration component of Micro Focus Secure Messaging Gateway (SMG) allows a remote attacker authenticated as a privileged user to execute arbitrary OS commands on the SMG server. This can be exploited in co…

    Micro Focus Secure Messaging Gateway
  • Critical 10.0
    CVE-2018-12464 Public exploit EPSS 81%

    Unauthenticated SQL injection in Micro Focus Secure Messaging Gateway

    A SQL injection vulnerability in the web administration and quarantine components of Micro Focus Secure Messaging Gateway allows an unauthenticated remote attacker to execute arbitrary SQL statements against the database. This can be exploited to create an ad…

    Micro Focus Secure Messaging Gateway