Browse CVEs

HIGH 7.5 CVE-2018-12469 Incorrect handling of an invalid value for an HTTP request parameter by Directory Server (aka Enterprise Server Administration web UI) in Micro Focus… Enterprise Developer after 2.3 Fix from $1,9502018-10-12 HIGH 8.8 CVE-2018-6504 A potential Cross-Site Request Forgery (CSRF) vulnerability has been identified in ArcSight Management Center (ArcMC) in all versions prior to 2.81. … Arcsight Management Center 2.81+ Fix from $1,9502018-09-20 CRITICAL 9.8 CVE-2018-6498 Remote Code Execution in the following products Hybrid Cloud Management Containerized Suite HCM2017.11, HCM2018.02, HCM2018.05, Operations Bridge Con… Data Center Automation Mitigation only Fix from $2,3002018-08-30 CRITICAL 9.8 CVE-2018-6499 Remote Code Execution in the following products Hybrid Cloud Management Containerized Suite HCM2017.11, HCM2018.02, HCM2018.05, Operations Bridge Con… Data Center Automation Mitigation only Fix from $2,3002018-08-30 HIGH 7.5 CVE-2018-7686 Information leakage vulnerability in NetIQ eDirectory before 9.1.1 HF1 due to shared memory usage. Edirectory after 9.1.1 Fix from $1,9502018-08-09 MEDIUM 6.1 CVE-2018-7692 Unvalidated redirect vulnerability in in NetIQ eDirectory before 9.1.1 HF1. Edirectory after 9.1.1 Fix from $1,6002018-08-09 HIGH 7.2 CVE-2018-12468 A vulnerability in the administration console of Micro Focus GroupWise prior to version 18.0.2 may allow a remote attacker authenticated as an admini… Groupwise 18.0.2+ Fix from $1,9502018-08-01 CRITICAL 9.8 CVE-2018-12464EPSS 81% A SQL injection vulnerability in the web administration and quarantine components of Micro Focus Secure Messaging Gateway allows an unauthenticated r… Secure Messaging Gateway 471+ Fix from $2,3002018-06-29 HIGH 7.2 CVE-2018-12465EPSS 79% An OS command injection vulnerability in the web administration component of Micro Focus Secure Messaging Gateway (SMG) allows a remote attacker auth… Secure Messaging Gateway 471+ Fix from $1,9502018-06-29 MEDIUM 6.5 CVE-2018-7682 Micro Focus Solutions Business Manager versions prior to 11.4 allows a user to invoke SBM RESTful services across domains. Solutions Business Manager 11.4+ Fix from $1,6002018-06-22 CRITICAL 9.8 CVE-2018-7679 Micro Focus Solutions Business Manager versions prior to 11.4 when ASP.NET is configured with execute permission on the virtual directories and does … Solutions Business Manager 11.4+ Fix from $2,3002018-06-21 HIGH 7.5 CVE-2018-7683 Micro Focus Solutions Business Manager versions prior to 11.4 might reveal certain sensitive information in server log files. Solutions Business Manager 11.4+ Fix from $1,9502018-06-21 MEDIUM 6.1 CVE-2018-7680 Micro Focus Solutions Business Manager versions prior to 11.4 can reflect back HTTP header values. Solutions Business Manager 11.4+ Fix from $1,6002018-06-21 HIGH 8.8 CVE-2018-6496 Remote Cross-site Request forgery (CSRF) potential has been identified in UCMBD Browser version 4.10, 4.11, 4.12, 4.13, 4.14, 4.15, 4.15.1 which coul… Universal Cmbd Browser after 4.15.1 Fix from $1,9502018-06-16 HIGH 8.8 CVE-2018-6497 Remote Cross-site Request forgery (CSRF) potential has been identified in UCMBD Server version DDM Content Pack V 10.20, 10.21, 10.22, 10.22 CUP7, 10… Cms Server after 11.0 Fix from $1,9502018-06-16 MEDIUM 5.4 CVE-2018-6495 Cross-Site Scripting (XSS) in Micro Focus Universal CMDB, version 10.20, 10.21, 10.22, 10.30, 10.31, 10.32, 10.33, 11.0, CMS, version 4.10, 4.11, 4.1… Universal Cmdb Mitigation only Fix from $1,6002018-05-23 MEDIUM 5.4 CVE-2018-6494 Remote SQL Injection against the HP Service Manager Software Web Tier, version 9.30, 9.31, 9.32, 9.33, 9.34, 9.35, 9.40, 9.41, 9.50, 9.51, may lead t… Service Manager Mitigation only Fix from $1,6002018-05-22 HIGH 7.8 CVE-2018-7687 The Micro Focus Client for OES before version 2 SP4 IR8a has a vulnerability that could allow a local attacker to elevate privileges via a buffer ove… Client after 2.0 Fix from $1,9502018-05-21 CRITICAL 9.8 CVE-2018-6491 Local Escalation of Privilege vulnerability to Micro Focus Universal CMDB, versions 10.20, 10.21, 10.22, 10.30, 10.31, 10.32, 10.33, 11.00. The vulne… Ucmdb Configuration Manager Mitigation only Fix from $2,3002018-04-24 MEDIUM 5.3 CVE-2018-7675 In NetIQ Sentinel before 8.1.x, a Sentinel user is logged into the Sentinel Web Interface. After performing some tasks within Sentinel the user does … Sentinel after 8.1 Fix from $1,6002018-03-07 CRITICAL 9.8 CVE-2017-9285 NetIQ eDirectory before 9.0 SP4 did not enforce login restrictions when "ebaclient" was used, allowing unpermitted access to eDirectory services. Edirectory after 9.0 Fix from $2,3002018-03-02 HIGH 8.8 CVE-2017-7429 The certificate upload in NetIQ eDirectory PKI plugin before 8.8.8 Patch 10 Hotfix 1 could be abused to upload JSP code which could be used by authen… Edirectory after 8.8.8 Fix from $1,9502018-03-02 CRITICAL 9.8 CVE-2018-6488 Arbitrary Code Execution vulnerability in Micro Focus Universal CMDB, version 4.10, 4.11, 4.12. This vulnerability could be remotely exploited to all… Ucmdb Configuration Manager Mitigation only Fix from $2,3002018-02-22 CRITICAL 9.8 CVE-2018-6489 XML External Entity (XXE) vulnerability in Micro Focus Project and Portfolio Management Center, version 9.32. This vulnerability can be exploited to … Project And Portfolio Management Center Mitigation only Fix from $2,3002018-02-22 HIGH 7.5 CVE-2018-6487 Remote Disclosure of Information in Micro Focus Universal CMDB Foundation Software, version numbers 10.10, 10.11, 10.20, 10.21, 10.22, 10.30, 10.31, … Universal Cmdb Foundation Software No fix yet Fix from $1,9502018-02-20 MEDIUM 5.4 CVE-2017-8993 A Remote Cross-Site Scripting vulnerability in HPE Project and Portfolio Management (PPM) version v9.30, v9.31, v9.32, v9.40 was found. Project And Portfolio Management Mitigation only Fix from $1,6002018-02-15 CRITICAL 9.8 CVE-2018-6486 XML External Entity (XXE) vulnerability in Micro Focus Fortify Audit Workbench (AWB) and Micro Focus Fortify Software Security Center (SSC), versions… Fortify Audit Workbench Mitigation only Fix from $2,3002018-02-02 MEDIUM 5.4 CVE-2017-14363 Cross-Site Scripting (XSS) vulnerability has been identified in Micro Focus Operations Manager i, versions 10.60, 10.61, 10.62. The vulnerability cou… Operations Manager I No fix yet Fix from $1,6002017-12-21 HIGH 7.4 CVE-2017-14361 Man-In-The-Middle vulnerability in Micro Focus Project and Portfolio Management Center, version 9.32. This vulnerability could be exploited to allow … Project And Portfolio Management No fix yet Fix from $1,9502017-12-13 HIGH 7.3 CVE-2017-14362 Cross-Site Request Forgery vulnerability in Micro Focus Project and Portfolio Management Center, version 9.32. This vulnerability could be exploited … Project And Portfolio Management Mitigation only Fix from $1,9502017-12-13