← Back

CVE-2019-11651

nvd nist
Published: Oct 2, 2019Modified: Jun 17, 2026

JSON object

Loading...
6.1
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Exploitability: 2.8 / Impact: 2.7
Source: NVD

Description

Reflected XSS on Micro Focus Enterprise Developer and Enterprise Server, all versions prior to version 3.0 Patch Update 20, version 4.0 Patch Update 12, and version 5.0 Patch Update 2. The vulnerability could be exploited to redirect a user to a malicious page or forge certain types of web requests.

Affected (68)

Microfocus
2 products
Enterprise Developer
Enterprise Server
Configuration A
68 vulnerable
Vulnerable SoftwareAffected Versions
Microfocus
Enterprise Developer
Version 3.0
Enterprise Developer
Version 3.0 patch_10
Enterprise Developer
Version 3.0 patch_11
Enterprise Developer
Version 3.0 patch_12
Enterprise Developer
Version 3.0 patch_13
Enterprise Developer
Version 3.0 patch_14
Enterprise Developer
Version 3.0 patch_15
Enterprise Developer
Version 3.0 patch_16
Enterprise Developer
Version 3.0 patch_17
Enterprise Developer
Version 3.0 patch_18
Enterprise Developer
Version 3.0 patch_19
Enterprise Developer
Version 3.0 patch_1
Enterprise Developer
Version 3.0 patch_2
Enterprise Developer
Version 3.0 patch_3
Enterprise Developer
Version 3.0 patch_4
Enterprise Developer
Version 3.0 patch_5
Enterprise Developer
Version 3.0 patch_6
Enterprise Developer
Version 3.0 patch_7
Enterprise Developer
Version 3.0 patch_8
Enterprise Developer
Version 3.0 patch_9
Enterprise Developer
Version 4.0
Enterprise Developer
Version 4.0 patch_10
Enterprise Developer
Version 4.0 patch_11
Enterprise Developer
Version 4.0 patch_1
Enterprise Developer
Version 4.0 patch_2
Enterprise Developer
Version 4.0 patch_3
Enterprise Developer
Version 4.0 patch_4
Enterprise Developer
Version 4.0 patch_5
Enterprise Developer
Version 4.0 patch_6
Enterprise Developer
Version 4.0 patch_7
Enterprise Developer
Version 4.0 patch_8
Enterprise Developer
Version 4.0 patch_9
Enterprise Developer
Version 5.0
Enterprise Developer
Version 5.0 patch_1
Microfocus
Enterprise Server
Version 3.0
Enterprise Server
Version 3.0 patch_10
Enterprise Server
Version 3.0 patch_11
Enterprise Server
Version 3.0 patch_12
Enterprise Server
Version 3.0 patch_13
Enterprise Server
Version 3.0 patch_14
Enterprise Server
Version 3.0 patch_15
Enterprise Server
Version 3.0 patch_16
Enterprise Server
Version 3.0 patch_17
Enterprise Server
Version 3.0 patch_18
Enterprise Server
Version 3.0 patch_19
Enterprise Server
Version 3.0 patch_1
Enterprise Server
Version 3.0 patch_2
Enterprise Server
Version 3.0 patch_3
Enterprise Server
Version 3.0 patch_4
Enterprise Server
Version 3.0 patch_5
Enterprise Server
Version 3.0 patch_6
Enterprise Server
Version 3.0 patch_7
Enterprise Server
Version 3.0 patch_8
Enterprise Server
Version 3.0 patch_9
Enterprise Server
Version 4.0
Enterprise Server
Version 4.0 patch_10
Enterprise Server
Version 4.0 patch_11
Enterprise Server
Version 4.0 patch_1
Enterprise Server
Version 4.0 patch_2
Enterprise Server
Version 4.0 patch_3
Enterprise Server
Version 4.0 patch_4
Enterprise Server
Version 4.0 patch_5
Enterprise Server
Version 4.0 patch_6
Enterprise Server
Version 4.0 patch_7
Enterprise Server
Version 4.0 patch_8
Enterprise Server
Version 4.0 patch_9
Enterprise Server
Version 5.0
Enterprise Server
Version 5.0 patch_1

Related CWEs

CWE-79
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

References (2)

Source: security@opentext.com
Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.