Browse CVEs

MEDIUM 5.4 CVE-2019-11653 Remote Access Control Bypass in Micro Focus Content Manager. versions 9.1, 9.2, 9.3. The vulnerability could be exploited to manipulate data stored d… Content Manager Mitigation only Fix from $1,6002019-08-07 MEDIUM 5.9 CVE-2019-11650 A potential Man in the Middle attack (MITM) was found in NetIQ Advanced Authentication Framework versions prior to 6.0. Netiq Advanced Authentication 6.0+ Fix from $1,6002019-07-10 MEDIUM 6.1 CVE-2019-11647 A potential XSS exists in Self Service Password Reset, in Micro Focus NetIQ Software all versions prior to version 4.4. The vulnerability could be ex… Netiq Self Service Password Reset 4.4+ Fix from $1,6002019-06-24 MEDIUM 5.4 CVE-2019-11649 Cross-Site Scripting vulnerability in Micro Focus Fortify Software Security Center Server, versions 17.2, 18.1, 18.2, has been identified in Micro Fo… Fortify Software Security Center Mitigation only Fix from $1,6002019-06-19 MEDIUM 6.1 CVE-2019-3477 Micro Focus Solution Business Manager versions prior to 11.4.2 is susceptible to open redirect. Solutions Business Manager 11.4.2+ Fix from $1,6002019-06-07 HIGH 8.8 CVE-2019-11646 Remote unauthorized command execution and unauthorized disclosure of information in Micro Focus Service Manager, versions 9.30, 9.31, 9.32, 9.33, 9.3… Service Manager Mitigation only Fix from $1,9502019-06-03 HIGH 7.5 CVE-2016-1600 The ServiceNow driver in NetIQ Identity Manager versions prior to 4.6 are susceptible to an information disclosure vulnerability. Identity Manager 4.6+ Fix from $1,9502019-05-09 MEDIUM 6.1 CVE-2019-3490 A DOM based XSS vulnerability has been identified in the Netstorage component of Open Enterprise Server (OES) allowing a remote attacker to execute j… Open Enterprise Server Mitigation only Fix from $1,6002019-05-02 HIGH 8.8 CVE-2019-3493 A potential security vulnerability has been identified in Micro Focus Network Automation Software 9.20, 9.21, 10.00, 10.10, 10.20, 10.30, 10.40, 10.5… Network Automation Mitigation only Fix from $1,9502019-04-29 HIGH 7.5 CVE-2019-3489 An unauthenticated file upload vulnerability has been identified in the Web Client component of Micro Focus Content Manager 9.1, 9.2, and 9.3 when co… Content Manager after 9.3 Fix from $1,9502019-04-01 HIGH 7.5 CVE-2018-19643 Information leakage issue in Micro Focus Solutions Business Manager (SBM) (formerly Serena Business Manager (SBM)) versions prior to 11.5. Solutions Business Manager 11.5+ Fix from $1,9502019-03-27 MEDIUM 6.1 CVE-2018-19644 Reflected cross site script issue in Micro Focus Solutions Business Manager (SBM) (formerly Serena Business Manager (SBM)) versions prior to 11.5. Solutions Business Manager 11.5+ Fix from $1,6002019-03-27 CRITICAL 9.8 CVE-2018-19641 Unauthenticated remote code execution issue in Micro Focus Solutions Business Manager (SBM) (formerly Serena Business Manager (SBM)) versions prior t… Solutions Business Manager 11.5+ Fix from $2,3002019-03-27 HIGH 7.5 CVE-2018-19642 Denial of service issue in Micro Focus Solutions Business Manager (SBM) (formerly Serena Business Manager (SBM)) versions prior to 11.5. Solutions Business Manager 11.5+ Fix from $1,9502019-03-27 CRITICAL 9.8 CVE-2019-3476 Remote arbitrary code execution in Micro Focus Data Protector, version 10.03 this vulnerability could allow remote arbitrary code execution. Data Protector No fix yet Fix from $2,3002019-03-25 HIGH 7.5 CVE-2016-9166 NetIQ eDirectory versions prior to 9.0.2, under some circumstances, could be susceptible to downgrade of communication security. Netiq Edirectory 9.0+ Fix from $1,9502019-03-21 HIGH 7.8 CVE-2019-3475 A local privilege escalation vulnerability in the famtd component of Micro Focus Filr 3.0 allows a local attacker authenticated as a low privilege us… Filr No fix yet Fix from $1,9502019-02-20 MEDIUM 6.5 CVE-2019-3474EPSS 9% A path traversal vulnerability in the web application component of Micro Focus Filr 3.x allows a remote attacker authenticated as a low privilege use… Filr No fix yet Fix from $1,6002019-02-20 CRITICAL 9.8 CVE-2018-19645 An Authentication Bypass issue exists in Solutions Business Manager (SBM) (formerly Serena Business Manager (SBM)) versions prior to 11.5. Solutions Business Manager 11.5+ Fix from $2,3002019-02-12 MEDIUM 6.5 CVE-2018-7690EPSS 7% A potential Remote Unauthorized Access in Micro Focus Fortify Software Security Center (SSC), versions 17.10, 17.20, 18.10 this exploitation could al… Fortify Software Security Center No fix yet Fix from $1,6002018-12-13 MEDIUM 6.5 CVE-2018-7691EPSS 7% A potential Remote Unauthorized Access in Micro Focus Fortify Software Security Center (SSC), versions 17.10, 17.20, 18.10 this exploitation could al… Fortify Software Security Center No fix yet Fix from $1,6002018-12-13 HIGH 7.5 CVE-2018-17950 Incorrect enforcement of authorization checks in eDirectory prior to 9.1 SP2 Edirectory after 9.1 Fix from $1,9502018-12-12 MEDIUM 6.1 CVE-2018-17949 Cross site scripting vulnerability in iManager prior to 3.1 SP2. Imanager 3.1.2+ Fix from $1,6002018-12-12 MEDIUM 6.1 CVE-2018-17952 Cross site scripting vulnerability in eDirectory prior to 9.1 SP2 Edirectory 9.1.2+ Fix from $1,6002018-12-12 CRITICAL 9.8 CVE-2009-5153EPSS 6% In Novell NetWare before 6.5 SP8, a stack buffer overflow in processing of CALLIT RPC calls in the NFS Portmapper daemon in PKERNEL.NLM allowed remot… Netware after 6.5 Fix from $2,3002018-11-21 MEDIUM 6.1 CVE-2018-17948 An open redirect vulnerability exists in the Access Manager Identity Provider prior to 4.4 SP3. Access Manager 4.4+ Fix from $1,6002018-11-20 MEDIUM 6.1 CVE-2018-12480 Mitigates an XSS issue in NetIQ Access Manager versions prior to 4.4 SP3. Access Manager No fix yet Fix from $1,6002018-11-15 MEDIUM 6.5 CVE-2018-18591 A potential unauthorized disclosure of data vulnerability has been identified in Micro Focus Service Manager versions: 9.30, 9.31, 9.32, 9.33, 9.34, … Service Manager No fix yet Fix from $1,6002018-11-13 HIGH 8.8 CVE-2018-18590 A potential remote code execution and information disclosure vulnerability exists in Micro Focus Operations Bridge containerized suite versions 2017.… Operations Bridge Mitigation only Fix from $1,9502018-11-07 HIGH 8.8 CVE-2018-18589 A potential Remote Arbitrary Code Execution vulnerability has been identified in Micro Focus' Real User Monitoring software, versions 9.26IP, 9.30, 9… Real User Monitoring Mitigation only Fix from $1,9502018-10-23