Browse CVEs

MEDIUM 5.4 CVE-2022-26324 Possible XSS in iManager URL for access Component has been discovered in OpenText™ iManager 3.2.6.0000. Imanager Mitigation only Fix from $1,6002024-11-22 CRITICAL 9.8 CVE-2023-5913 Incorrect Privilege Assignment vulnerability in opentext Fortify ScanCentral DAST. The vulnerability could be exploited to gain elevated privileges.T… Fortify Scancentral Dast Mitigation only Fix from $2,3002023-11-08 MEDIUM 6.1 CVE-2023-4964 Potential open redirect vulnerability in opentext Service Management Automation X (SMAX) versions 2020.05, 2020.08, 2020.11, 2021.02, 2021.05, 2021.… Asset Management X Mitigation only Fix from $1,6002023-10-30 CRITICAL 9.8 CVE-2023-4501 User authentication with username and password credentials is ineffective in OpenText (Micro Focus) Visual COBOL, COBOL Server, Enterprise Developer,… Cobol Server Mitigation only Fix from $2,3002023-09-12 MEDIUM 6.5 CVE-2023-32265 A potential security vulnerability has been identified in the Enterprise Server Common Web Administration (ESCWA) component used in Enterprise Server… Cobol Server Mitigation only Fix from $1,6002023-07-20 MEDIUM 6.1 CVE-2021-22531 A bug exist in the input parameter of Access Manager that allows supply of invalid character to trigger cross-site scripting vulnerability. This affe… Access Manager Mitigation only Fix from $1,6002022-05-12 CRITICAL 9.8 CVE-2021-38125 Unauthenticated remote code execution in Micro Focus Operations Bridge containerized, affecting versions 2021.05, 2021.08, and newer versions of Micr… Operations Bridge Mitigation only Fix from $2,3002022-04-11 MEDIUM 6.1 CVE-2021-38126 Potential vulnerabilities have been identified in Micro Focus ArcSight Enterprise Security Manager, affecting versions 7.4.x and 7.5.x. The vulnerabi… Arcsight Enterprise Security Manager No fix yet Fix from $1,6002022-01-14 MEDIUM 6.1 CVE-2021-38127 Potential vulnerabilities have been identified in Micro Focus ArcSight Enterprise Security Manager, affecting versions 7.4.x and 7.5.x. The vulnerabi… Arcsight Enterprise Security Manager Mitigation only Fix from $1,6002022-01-14 MEDIUM 6.1 CVE-2021-38123 Open Redirect vulnerability in Micro Focus Network Automation, affecting Network Automation versions 10.4x, 10.5x, 2018.05, 2018.11, 2019.05, 2020.02… Network Automation Mitigation only Fix from $1,6002021-09-07 HIGH 8.8 CVE-2021-22517 A potential unauthorized privilege escalation vulnerability has been identified in Micro Focus Data Protector. The vulnerability affects versions 10.… Data Protector Mitigation only Fix from $1,9502021-08-05 HIGH 7.5 CVE-2021-22516 Insertion of Sensitive Information into Log File vulnerability in Micro Focus Secure API Manager (SAPIM) product, affecting version 2.0.0. The vulner… Secure Api Manager No fix yet Fix from $1,9502021-06-04 CRITICAL 9.8 CVE-2021-22519 Execute arbitrary code vulnerability in Micro Focus SiteScope product, affecting versions 11.40,11.41 , 2018.05(11.50), 2018.08(11.51), 2018.11(11.60… Sitescope Mitigation only Fix from $2,3002021-05-28 CRITICAL 9.8 CVE-2021-22514 An arbitrary code execution vulnerability exists in Micro Focus Application Performance Management, affecting versions 9.40, 9.50 and 9.51. The vulne… Application Performance Management Mitigation only Fix from $2,3002021-04-28 CRITICAL 9.8 CVE-2021-22505 Escalation of privileges vulnerability in Micro Focus Operations Agent, affects versions 12.0x, 12.10, 12.11, 12.12, 12.14 and 12.15. The vulnerabili… Operations Agent Mitigation only Fix from $2,3002021-04-13 CRITICAL 9.8 CVE-2021-22507 Authentication bypass vulnerability in Micro Focus Operations Bridge Manager affects versions 2019.05, 2019.11, 2020.05 and 2020.10. The vulnerabilit… Operations Bridge Manager Mitigation only Fix from $2,3002021-04-08 CRITICAL 9.8 CVE-2021-22504 Arbitrary code execution vulnerability on Micro Focus Operations Bridge Manager product, affecting versions 10.1x, 10.6x, 2018.05, 2018.11, 2019.05, … Operations Bridge Manager Mitigation only Fix from $2,3002021-02-12 CRITICAL 9.8 CVE-2021-22502 KEVEPSS 97% Remote Code execution vulnerability in Micro Focus Operation Bridge Reporter (OBR) product, affecting version 10.40. The vulnerability could be explo… Operation Bridge Reporter Mitigation only Fix from $2,3002021-02-08 MEDIUM 6.5 CVE-2021-22500 Cross Site Request Forgery vulnerability in Micro Focus Application Performance Management product, affecting versions 9.40, 9.50 and 9.51. The vulne… Application Performance Management Mitigation only Fix from $1,6002021-02-06 CRITICAL 9.8 CVE-2020-25839 NetIQ Identity Manager 4.8 prior to version 4.8 SP2 HF1 are affected by an injection vulnerability. This vulnerability is fixed in NetIQ IdM 4.8 SP2 … Identity Manager No fix yet Fix from $2,3002020-11-20 MEDIUM 5.4 CVE-2020-25832 Reflected Cross Site scripting vulnerability on Micro Focus Filr product, affecting version 4.2.1. The vulnerability could be exploited to perform Re… Filr Mitigation only Fix from $1,6002020-11-17 CRITICAL 9.8 CVE-2020-11844 Incorrect Authorization vulnerability in Micro Focus Container Deployment Foundation component affects products: - Hybrid Cloud Management. Versions … Service Management Automation Mitigation only Fix from $2,3002020-05-29 MEDIUM 5.4 CVE-2020-9524 Cross Site scripting vulnerability on Micro Focus Enterprise Server and Enterprise developer, affecting all versions prior to version 5.0 Patch Updat… Enterprise Developer Mitigation only Fix from $1,6002020-05-18 HIGH 8.8 CVE-2020-9521 An SQL injection vulnerability was discovered in Micro Focus Service Manager Automation (SMA), affecting versions 2019.08, 2019.05, 2019.02, 2018.08,… Service Manager Automation Mitigation only Fix from $1,9502020-03-26 MEDIUM 5.4 CVE-2020-9517 There is an improper restriction of rendered UI layers or frames vulnerability in Micro Focus Service Manager Release Control versions 9.50 and 9.60.… Service Manager Mitigation only Fix from $1,6002020-03-09 MEDIUM 6.5 CVE-2019-17085 XXE attack vulnerability on Micro Focus Operations Agent, affected version 12.0, 12.01, 12.02, 12.03, 12.04, 12.05, 12.06, 12.10, 12.11. The vulnerab… Operations Agent Mitigation only Fix from $1,6002019-11-18 MEDIUM 6.1 CVE-2019-11651 Reflected XSS on Micro Focus Enterprise Developer and Enterprise Server, all versions prior to version 3.0 Patch Update 20, version 4.0 Patch Update … Enterprise Developer Mitigation only Fix from $1,6002019-10-02 HIGH 7.5 CVE-2019-11668 HTTP cookie in Micro Focus Service manager, Versions 9.30, 9.31, 9.32, 9.33, 9.34, 9.35, 9.40, 9.41, 9.50, 9.51, 9.52, 9.60, 9.61, 9.62. And Micro Fo… Service Manager No fix yet Fix from $1,9502019-09-10 HIGH 7.5 CVE-2019-11669 Modifiable read only check box In Micro Focus Service Manager, versions 9.60p1, 9.61, 9.62. This vulnerability could be exploited to allow unauthoriz… Service Manager Mitigation only Fix from $1,9502019-09-10 HIGH 7.5 CVE-2019-11654 Path traversal vulnerability in Micro Focus Verastream Host Integrator (VHI), versions 7.7 SP2 and earlier, The vulnerability allows remote unauthent… Verastream Host Integrator Mitigation only Fix from $1,9502019-08-23