Skip to content
OpenAdvisories

Vendor

Micro Focus

127 known vulnerabilities.

Products

Service Manager 8 Micro Focus Enterprise Developer, Micro Focus Enterprise Server 7 Solutions Business Manager 7 NetIQ Access Manager 7 ArcSight Management Center 6 Solutions Business Manager 11.4 5 Solutions Business Manager (SBM) 4 ArcSight Logger 4 Filr 3 Dimensions CM 3 Operation Bridge Manager 3 HP ArcSight ESM 3 HP ArcSight ESM Express 3 Secure Messaging Gateway 2 Micro Focus VisiBroker 2 NetIQ eDirectory 9.1 SP2 2 Content Manager 2 Micro Focus NetIQ Self Service Password Reset. 2 Hybrid Cloud Management 2 Micro Focus ArcSight Logger 2 Application Performance Management 2 Operation Bridge (containerized) 2 Network Operations Management Ultimate 2 Network Automation 2 Universal CMDB 2 Network Operations Management (NOM) Suite CDF 2 Service Management Automation Suite 2 Data Center Automation Containerized Suite 2 Operations Bridge Containerized Suite 2 Hybrid Cloud Management Containerized Suite 2 Project and Portfolio Management Center 2 UCMDB Browser 2 Fortify Software Security Center (SSC) 2 Advanced Authentication 1 Vibe 1 Enterprise Server 1 Enterprise Test Server 1 Enterprise Developer 1 Visual COBOL 1 NetIQ Privileged Account Manager (PAM) 3.1 and 3.2 1
All Critical High Medium Low Exploited only Public exploit

127 results · Feed

  • Unscored —
    CVE-2019-11665

    Data exposure in Micro Focus Service Manager product versions 9.30, 9.31, 9.32, 9.33, 9.34, 9.35, 9.40, 9.41, 9.50, 9.5…

    Micro Focus Service Manager
  • Unscored —
    CVE-2019-11666

    Insecure deserialization of untrusted data in Micro Focus Service Manager product versions 9.30, 9.31, 9.32, 9.33, 9.34…

    Micro Focus Service Manager
  • Unscored —
    CVE-2019-11667

    Unauthorized access to contact information in Micro Focus Service Manager, versions 9.41, 9.50, 9.51, 9.52, 9.60, 9.61,…

    Micro Focus Service Manager
  • Unscored —
    CVE-2019-11669

    Modifiable read only check box In Micro Focus Service Manager, versions 9.60p1, 9.61, 9.62. This vulnerability could be…

    Micro Focus Service Manager
  • Unscored —
    CVE-2019-11658

    Information exposure in Micro Focus Content Manager, versions 9.1, 9.2 and 9.3. This vulnerability when configured to u…

    Micro Focus Content Manager
  • High 8.6
    CVE-2019-11654

    A path traversal vulnerability has been identified in Verastream Host Integrator

    Path traversal vulnerability in Micro Focus Verastream Host Integrator (VHI), versions 7.7 SP2 and earlier, The vulnerability allows remote unauthenticated attackers to read arbitrary files.

    Micro Focus Verastream Host Integrator
  • Unscored —
    CVE-2019-11652

    A potential authorization bypass issue was found in Micro Focus Self Service Password Reset (SSPR) versions prior to: 4…

    Micro Focus Self Service Password Reset (SSPR)
  • Unscored —
    CVE-2019-11653

    Remote Access Control Bypass in Micro Focus Content Manager. versions 9.1, 9.2, 9.3. The vulnerability could be exploit…

    Micro Focus Content Manager
  • Medium 4.6
    CVE-2019-3486

    ArcSight Security Management Center stored cross site script issue in version prior to 2.9.1

    Mitigates a stored cross site scripting issue in ArcSight Security Management Center versions prior to 2.9.1

    Micro Focus Arcsight Security Management Center
  • Medium 4.6
    CVE-2019-3485

    ArcSight Logger stored cross site script issue in version prior to 6.7.1

    Mitigates a stored cross site scripting issue in ArcSight Logger versions prior to 6.7.1

    Micro Focus ArcSight Logger
  • Unscored —
    CVE-2019-11650

    A potential Man in the Middle attack (MITM) was found in NetIQ Advanced Authentication Framework versions prior to 6.0.

    Micro Focus NetIQ Advanced Authentication Framework
  • Unscored —
    CVE-2019-11648

    An information leakage exists in Micro Focus NetIQ Self Service Password Reset Software all versions prior to version 4…

    Micro Focus Micro Focus NetIQ Self Service Password Reset.
  • Unscored —
    CVE-2019-11647

    A potential XSS exists in Self Service Password Reset, in Micro Focus NetIQ Software all versions prior to version 4.4.…

    Micro Focus Micro Focus NetIQ Self Service Password Reset.
  • Medium 5.4
    CVE-2019-11649

    KM03461174 Micro Focus Fortify Software Security Center Server, CVE-2019-11649

    Cross-Site Scripting vulnerability in Micro Focus Fortify Software Security Center Server, versions 17.2, 18.1, 18.2, has been identified in Micro Focus Software Security Center. The vulnerability could be exploited to execute JavaScript code in user’s browse…

    Micro Focus Micro Focus Fortify Software Security Center Server
  • Unscored —
    CVE-2019-3477

    Micro Focus Solution Business Manager versions prior to 11.4.2 is susceptible to open redirect.

    Micro Focus Solutions Business Manager
  • Unscored —
    CVE-2019-3493

    A potential security vulnerability has been identified in Micro Focus Network Automation Software 9.20, 9.21, 10.00, 10…

    Micro Focus Micro Focus Network Automation and Micro Focus Network Operations Management (NOM)
  • Unscored —
    CVE-2019-3489

    An unauthenticated file upload vulnerability has been identified in the Web Client component of Micro Focus Content Man…

    Micro Focus Micro Focus Content Manager
  • Medium 4.7
    CVE-2018-19643

    Solutions Business Manager (SBM) Information Leakage issue in version prior to 11.5

    Information leakage issue in Micro Focus Solutions Business Manager (SBM) (formerly Serena Business Manager (SBM)) versions prior to 11.5.

    Micro Focus Solutions Business Manager (SBM)
  • Medium 5.0
    CVE-2018-19644

    Solutions Business Manager (SBM) reflected cross site script issue in version prior to 11.5

    Reflected cross site script issue in Micro Focus Solutions Business Manager (SBM) (formerly Serena Business Manager (SBM)) versions prior to 11.5.

    Micro Focus Solutions Business Manager (SBM)
  • Medium 5.1
    CVE-2018-19642

    Solutions Business Manager (SBM) Denial of Service issue in version prior to 11.5

    Denial of service issue in Micro Focus Solutions Business Manager (SBM) (formerly Serena Business Manager (SBM)) versions prior to 11.5.

    Micro Focus Solutions Business Manager (SBM)
  • Medium 6.1
    CVE-2018-19641

    Solutions Business Manager (SBM) Unauthenticated remote code execution issue in version prior to 11.5

    Unauthenticated remote code execution issue in Micro Focus Solutions Business Manager (SBM) (formerly Serena Business Manager (SBM)) versions prior to 11.5.

    Micro Focus Solutions Business Manager (SBM)
  • Medium 6.5
    CVE-2019-3474 Public exploit

    Path traversal vulnerability in Filr web application

    A path traversal vulnerability in the web application component of Micro Focus Filr 3.x allows a remote attacker authenticated as a low privilege user to download arbitrary files from the Filr server. This vulnerability affects all versions of Filr 3.x prior …

    Micro Focus Filr
  • High 7.8
    CVE-2019-3475 Public exploit

    Local privilege escalation in Filr famtd

    A local privilege escalation vulnerability in the famtd component of Micro Focus Filr 3.0 allows a local attacker authenticated as a low privilege user to escalate to root. This vulnerability affects all versions of Filr 3.x prior to Security Update 6.

    Micro Focus Filr
  • Medium 6.5
    CVE-2018-18593

    MFSBGN03838 rev.1 - UCMDB Configuration Management Service, Multiple Vulnerabilities

    Remote Directory Traversal and Remote Disclosure of Privileged Information in UCMDB Configuration Management Service, version 10.22, 10.22 CUP1, 10.22 CUP2, 10.22 CUP3, 10.22 CUP4, 10.22 CUP5, 10.22 CUP6, 10.22 CUP7, 10.33, 10.33 CUP1, 10.33 CUP2, 10.33 CUP3,…

    Micro Focus UCMDB Configuration Management Service
  • Medium 6.5
    CVE-2018-7691 Public exploit

    MFSBGN03835 rev.1 - Fortify Software Security Center (SSC), Remote Unauthorized Access

    A potential Remote Unauthorized Access in Micro Focus Fortify Software Security Center (SSC), versions 17.10, 17.20, 18.10 this exploitation could allow Remote Unauthorized Access

    Micro Focus Fortify Software Security Center (SSC)
  • Medium 6.5
    CVE-2018-7690 Public exploit

    MFSBGN03835 rev.1 - Fortify Software Security Center (SSC), Remote Unauthorized Access

    A potential Remote Unauthorized Access in Micro Focus Fortify Software Security Center (SSC), versions 17.10, 17.20, 18.10 this exploitation could allow Remote Unauthorized Access

    Micro Focus Fortify Software Security Center (SSC)
  • Unscored —
    CVE-2018-17950

    Incorrect enforcement of authorization checks in eDirectory prior to 9.1 SP2

    Micro Focus NetIQ eDirectory 9.1 SP2
  • Unscored —
    CVE-2018-17949

    Cross site scripting vulnerability in iManager prior to 3.1 SP2.

    Micro Focus NetIQ iManager 3.1 SP2
  • Unscored —
    CVE-2018-17952

    Cross site scripting vulnerability in eDirectory prior to 9.1 SP2

    Micro Focus NetIQ eDirectory 9.1 SP2
  • Medium 6.8
    CVE-2018-18591

    MFSBGN03823 rev.1 - Micro Focus Service Manager, unauthorized disclosure of data

    A potential unauthorized disclosure of data vulnerability has been identified in Micro Focus Service Manager versions: 9.30, 9.31, 9.32, 9.33, 9.34, 9.35, 9.40, 9.41, 9.50, 9.51. The vulnerability could be exploited to release unauthorized disclosure of data.

    Micro Focus Micro Focus Service Manager
  • Critical 9.6
    CVE-2018-18590

    MFSBGN03829 rev.1 - Micro Focus Operation Bridge Containerized Suite, Remote Code Execution

    A potential remote code execution and information disclosure vulnerability exists in Micro Focus Operations Bridge containerized suite versions 2017.11, 2018.02, 2018.05, 2018.08. This vulnerability could allow for information disclosure.

    Micro Focus Operation Bridge Containerized Suite
  • Medium 6.3
    CVE-2018-18589

    MFSBGN03827 rev.1 - Microfocus Real User Monitoring 9.4.0 BPRDownload Java Deserialization Vulnerability

    A potential Remote Arbitrary Code Execution vulnerability has been identified in Micro Focus' Real User Monitoring software, versions 9.26IP, 9.30, 9.40 and 9.50. The vulnerability could be exploited to execute arbitrary code.

    Micro Focus Microfocus Real User Monitoring
  • Unscored —
    CVE-2018-12469

    Incorrect handling of an invalid value for an HTTP request parameter by Directory Server (aka Enterprise Server Adminis…

    Micro Focus Micro Focus Enterprise Developer, Micro Focus Enterprise Server
  • Medium 6.5
    CVE-2018-6502

    MFSBGN03824 rev.1 - ArcSight Management Center, Insufficient Access Control, Reflected Cross Site Scripting, Access Control vulnerability, Cross-Site Request Forgery (CSRF), Unauthenticated File Download, Directory Traversal Vulnerability

    A potential Reflected Cross-Site Scripting (XSS) Security vulnerability has been identified in ArcSight Management Center (ArcMC) in all versions prior to 2.81. This vulnerability could be exploited to allow for Reflected Cross-site Scripting (XSS).

    Micro Focus ArcSight Management Center
  • Medium 6.5
    CVE-2018-6503

    MFSBGN03824 rev.1 - ArcSight Management Center, Insufficient Access Control, Reflected Cross Site Scripting, Access Control vulnerability, Cross-Site Request Forgery (CSRF), Unauthenticated File Download, Directory Traversal Vulnerability

    A potential Access Control vulnerability has been identified in ArcSight Management Center (ArcMC) in all versions prior to 2.81. This vulnerability could be exploited to allow for vulnerable Access Controls.

    Micro Focus ArcSight Management Center
  • High 7.5
    CVE-2018-6505

    MFSBGN03824 rev.1 - ArcSight Management Center, Insufficient Access Control, Reflected Cross Site Scripting, Access Control vulnerability, Cross-Site Request Forgery (CSRF), Unauthenticated File Download, Directory Traversal Vulnerability

    A potential Unauthenticated File Download vulnerability has been identified in ArcSight Management Center (ArcMC) in all versions prior to 2.81. This vulnerability could be exploited to allow for Unauthenticated File Downloads.

    Micro Focus ArcSight Management Center
  • High 8.8
    CVE-2018-6504

    MFSBGN03824 rev.1 - ArcSight Management Center, Insufficient Access Control, Reflected Cross Site Scripting, Access Control vulnerability, Cross-Site Request Forgery (CSRF), Unauthenticated File Download, Directory Traversal Vulnerability

    A potential Cross-Site Request Forgery (CSRF) vulnerability has been identified in ArcSight Management Center (ArcMC) in all versions prior to 2.81. This vulnerability could be exploited to allow for Cross-Site Request Forgery (CSRF).

    Micro Focus ArcSight Management Center
  • High 7.5
    CVE-2018-6500

    MFSBGN03824 rev.1 - ArcSight Management Center, Insufficient Access Control, Reflected Cross Site Scripting, Access Control vulnerability, Cross-Site Request Forgery (CSRF), Unauthenticated File Download, Directory Traversal Vulnerability

    A potential Directory Traversal Security vulnerability has been identified in ArcSight Management Center (ArcMC) in all versions prior to 2.81. This vulnerability could be remotely exploited to allow Directory Traversal.

    Micro Focus ArcSight Management Center
  • High 8.8
    CVE-2018-6498

    Micro Focus Container Deployment Foundation (CDF), Remote Code Execution

    Remote Code Execution in the following products Hybrid Cloud Management Containerized Suite HCM2017.11, HCM2018.02, HCM2018.05, Operations Bridge Containerized Suite 2017.11, 2018.02, 2018.05, Data Center Automation Containerized Suite 2017.01 until 2018.05, …

    Micro Focus Data Center Automation Containerized Suite Hybrid Cloud Management Containerized Suite Service Management Automation Suite
  • High 7.1
    CVE-2018-6499

    Remote Code Execution in the following products Hybrid Cloud Management Containerized Suite HCM2017.11, HCM2018.02, HCM…

    Micro Focus Hybrid Cloud Management Containerized Suite Service Management Automation Suite Operations Bridge Containerized Suite