← Back

Microfocus

microfocus

273 CVEs • 97 products

Products (97)

Click to collapse
Toggle
Imanager
imanager
22 CVEs
Access Manager
access_manager
18 CVEs
Solutions Business Manager
solutions_business_manager
17 CVEs
Edirectory
edirectory
16 CVEs
Service Manager
service_manager
16 CVEs
Enterprise Developer
enterprise_developer
12 CVEs
Enterprise Server
enterprise_server
12 CVEs
Netiq Advanced Authentication
netiq_advanced_authentication
11 CVEs
Arcsight Logger
arcsight_logger
9 CVEs
Application Automation Tools
application_automation_tools
9 CVEs
Arcsight Enterprise Security Manager
arcsight_enterprise_security_manager
8 CVEs
Arcsight Management Center
arcsight_management_center
8 CVEs
Operations Bridge
operations_bridge
7 CVEs
Operations Agent
operations_agent
7 CVEs
Filr
filr
6 CVEs
Operations Bridge Manager
operations_bridge_manager
6 CVEs
Visibroker
visibroker
5 CVEs
Application Performance Management
application_performance_management
5 CVEs
Netiq Access Manager
netiq_access_manager
5 CVEs
Sentinel
sentinel
4 CVEs
Fortify Software Security Center
fortify_software_security_center
4 CVEs
Service Management Automation
service_management_automation
4 CVEs
Netiq Self Service Password Reset
netiq_self_service_password_reset
4 CVEs
Verastream Host Integrator
verastream_host_integrator
4 CVEs
Operation Bridge Reporter
operation_bridge_reporter
4 CVEs
Privileged User Manager
privileged_user_manager
3 CVEs
Rumba
rumba
3 CVEs
Enterprise Server Monitor And Control
enterprise_server_monitor_and_control
3 CVEs
Identity Manager
identity_manager
3 CVEs
Project And Portfolio Management
project_and_portfolio_management
3 CVEs
Secure Messaging Gateway
secure_messaging_gateway
3 CVEs
Data Center Automation
data_center_automation
3 CVEs
Hybrid Cloud Management
hybrid_cloud_management
3 CVEs
Network Operations Management
network_operations_management
3 CVEs
Data Protector
data_protector
3 CVEs
Content Manager
content_manager
3 CVEs
Dimensions Cm
dimensions_cm
3 CVEs
Self Service Password Reset
self_service_password_reset
2 CVEs
Directory Server
directory_server
2 CVEs
Bi Directional Driver
bi-directional_driver
2 CVEs
Ucmdb Configuration Manager
ucmdb_configuration_manager
2 CVEs
Cms Server
cms_server
2 CVEs
Groupwise
groupwise
2 CVEs
Network Automation
network_automation
2 CVEs
Service Manager Automation
service_manager_automation
2 CVEs
Cobol Server
cobol_server
2 CVEs
Enterprise Test Server
enterprise_test_server
2 CVEs
Visual Cobol
visual_cobol
2 CVEs
Netiq Privileged Access Manager
netiq_privileged_access_manager
2 CVEs
Cobol
cobol
1 CVE
Sentinel Agent Manager
sentinel_agent_manager
1 CVE
Security Manager
security_manager
1 CVE
Security Solutions For Iseries
security_solutions_for_iseries
1 CVE
Accurev
accurev
1 CVE
Rumba Ftp
rumba_ftp
1 CVE
Host Access Management And Security Server
host_access_management_and_security_server
1 CVE
Reflection For The Web
reflection_for_the_web
1 CVE
Reflection Security Gateway
reflection_security_gateway
1 CVE
Reflection Zfe
reflection_zfe
1 CVE
Connected Backup
connected_backup
1 CVE
Operations Manager I
operations_manager_i
1 CVE
Fortify Audit Workbench
fortify_audit_workbench
1 CVE
Universal Cmdb Foundation Software
universal_cmdb_foundation_software
1 CVE
Project And Portfolio Management Center
project_and_portfolio_management_center
1 CVE
Client
client
1 CVE
Universal Cmdb
universal_cmdb
1 CVE
Universal Cmdb Browser
universal_cmdb_browser
1 CVE
Universal Cmbd Browser
universal_cmbd_browser
1 CVE
Universal Cmbd Server
universal_cmbd_server
1 CVE
Network Virtualization
network_virtualization
1 CVE
Service Virtualization
service_virtualization
1 CVE
Unified Functional Testing
unified_functional_testing
1 CVE
Real User Monitoring
real_user_monitoring
1 CVE
Netware
netware
1 CVE
Netiq Edirectory
netiq_edirectory
1 CVE
Open Enterprise Server
open_enterprise_server
1 CVE
Service Manager Chat Server
service_manager_chat_server
1 CVE
Service Manager Chat Service
service_manager_chat_service
1 CVE
Acutoweb
acutoweb
1 CVE
Vibe
vibe
1 CVE
Arcsight Enterprise Security Manager Express
arcsight_enterprise_security_manager_express
1 CVE
Operation Bridge Manager
operation_bridge_manager
1 CVE
Idol
idol
1 CVE
Application Lifecycle Management
application_lifecycle_management
1 CVE
Sitescope
sitescope
1 CVE
Secure Api Manager
secure_api_manager
1 CVE
Zenworks Configuration Management
zenworks_configuration_management
1 CVE
Zenworks Endpoint Security Management
zenworks_endpoint_security_management
1 CVE
Netiq Directory And Resource Administrator
netiq_directory_and_resource_administrator
1 CVE
Voltage Securemail
voltage_securemail
1 CVE
Zenworks
zenworks
1 CVE
Asset Management X
asset_management_x
1 CVE
Service Management Automation X
service_management_automation_x
1 CVE
Fortify Scancentral Dast
fortify_scancentral_dast
1 CVE
Vertica
vertica
1 CVE
Arcsight Platform
arcsight_platform
1 CVE
Autopass License Server
autopass_license_server
0 CVEs

CVEs (273)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2021-22510
1Microfocus
1Application Automation Tools
Jun 17, 2026
Apr 8, 2021
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
Reflected XSS vulnerability in Micro Focus Application Automation Tools Plugin - Jenkins plugin. The vulnerability affects all version 6.7 and earlier versions.
CVE-2021-22507
1Microfocus
1Operations Bridge Manager
Jun 17, 2026
Apr 8, 2021
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
Authentication bypass vulnerability in Micro Focus Operations Bridge Manager affects versions 2019.05, 2019.11, 2020.05 and 2020.10. The vulnerability could allow remote attackers to bypass user authentication and get un...Show more
Authentication bypass vulnerability in Micro Focus Operations Bridge Manager affects versions 2019.05, 2019.11, 2020.05 and 2020.10. The vulnerability could allow remote attackers to bypass user authentication and get unauthorized access.Show less
CVE-2021-22506
1Microfocus
1Access Manager
Jun 17, 2026
Mar 26, 2021
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
Advance configuration exposing Information Leakage vulnerability in Micro Focus Access Manager product, affects all versions prior to version 5.0. The vulnerability could cause information leakage.
CVE-2020-25840
1Microfocus
1Access Manager
Jun 17, 2026
Mar 26, 2021
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
Cross-Site scripting vulnerability in Micro Focus Access Manager product, affects all version prior to version 5.0. The vulnerability could cause configuration destruction.
CVE-2021-22496
1Microfocus
1Access Manager
Jun 17, 2026
Mar 25, 2021
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
Authentication Bypass Vulnerability in Micro Focus Access Manager Product, affects all version prior to version 4.5.3.3. The vulnerability could cause information leakage.
CVE-2019-18947
1Microfocus
1Solutions Business Manager
Jun 17, 2026
Feb 26, 2021
N/A· v4
3.5 LOW· v3
2.7 LOW· v2
Micro Focus Solutions Business Manager Application Repository versions prior to 11.7.1 are vulnerable to information disclosure.
CVE-2019-18946
1Microfocus
1Solutions Business Manager
Jun 17, 2026
Feb 26, 2021
N/A· v4
4.8 MEDIUM· v3
3.8 LOW· v2
Micro Focus Solutions Business Manager Application Repository versions prior to 11.7.1 are vulnerable to session fixation.
CVE-2019-18945
1Microfocus
1Solutions Business Manager
Jun 17, 2026
Feb 26, 2021
N/A· v4
8.0 HIGH· v3
5.2 MEDIUM· v2
Micro Focus Solutions Business Manager Application Repository versions prior to 11.7.1 are vulnerable to privilege escalation vulnerability.
CVE-2019-18944
1Microfocus
1Solutions Business Manager
Jun 17, 2026
Feb 26, 2021
N/A· v4
4.8 MEDIUM· v3
2.3 LOW· v2
Micro Focus Solutions Business Manager Application Repository versions prior to 11.7.1 are vulnerable to reflected XSS.
CVE-2019-18943
1Microfocus
1Solutions Business Manager
Jun 17, 2026
Feb 26, 2021
N/A· v4
8.0 HIGH· v3
5.2 MEDIUM· v2
Micro Focus Solutions Business Manager versions prior to 11.7.1 are vulnerable to XML External Entity Processing (XXE) on certain operations.
CVE-2019-18942
1Microfocus
1Solutions Business Manager
Jun 17, 2026
Feb 26, 2021
N/A· v4
4.8 MEDIUM· v3
2.3 LOW· v2
Micro Focus Solutions Business Manager versions prior to 11.7.1 are vulnerable to stored XSS. The application reflects previously stored user input without encoding.
CVE-2021-22504
1Microfocus
1Operations Bridge Manager
Jun 17, 2026
Feb 12, 2021
N/A· v4
9.8 CRITICAL· v3
10.0 HIGH· v2
Arbitrary code execution vulnerability on Micro Focus Operations Bridge Manager product, affecting versions 10.1x, 10.6x, 2018.05, 2018.11, 2019.05, 2019.11, 2020.05, 2020.10. The vulnerability could allow remote attacke...Show more
Arbitrary code execution vulnerability on Micro Focus Operations Bridge Manager product, affecting versions 10.1x, 10.6x, 2018.05, 2018.11, 2019.05, 2019.11, 2020.05, 2020.10. The vulnerability could allow remote attackers to execute arbitrary code on an OBM server.Show less
CVE-2021-22502
1Microfocus
1Operation Bridge Reporter
Jun 17, 2026
Feb 8, 2021
N/A· v4
9.8 CRITICAL· v3
10.0 HIGH· v2
Remote Code execution vulnerability in Micro Focus Operation Bridge Reporter (OBR) product, affecting version 10.40. The vulnerability could be exploited to allow Remote Code Execution on the OBR server.
CVE-2021-22500
1Microfocus
1Application Performance Management
Jun 17, 2026
Feb 6, 2021
N/A· v4
6.5 MEDIUM· v3
4.3 MEDIUM· v2
Cross Site Request Forgery vulnerability in Micro Focus Application Performance Management product, affecting versions 9.40, 9.50 and 9.51. The vulnerability could be exploited by attacker to trick the users into executi...Show more
Cross Site Request Forgery vulnerability in Micro Focus Application Performance Management product, affecting versions 9.40, 9.50 and 9.51. The vulnerability could be exploited by attacker to trick the users into executing actions of the attacker's choosing.Show less
CVE-2021-22499
1Microfocus
1Application Performance Management
Jun 17, 2026
Feb 6, 2021
N/A· v4
4.8 MEDIUM· v3
3.5 LOW· v2
Persistent Cross-Site scripting vulnerability in Micro Focus Application Performance Management product, affecting versions 9.40, 9.50 and 9.51. The vulnerability could allow persistent XSS attack.
CVE-2021-22498
1Microfocus
1Application Lifecycle Management
Jun 17, 2026
Jan 19, 2021
N/A· v4
8.1 HIGH· v3
5.5 MEDIUM· v2
XML External Entity Injection vulnerability in Micro Focus Application Lifecycle Management (Previously known as Quality Center) product. The vulnerability affects versions 12.x, 12.60 Patch 5 and earlier, 15.0.1 Patch 2...Show more
XML External Entity Injection vulnerability in Micro Focus Application Lifecycle Management (Previously known as Quality Center) product. The vulnerability affects versions 12.x, 12.60 Patch 5 and earlier, 15.0.1 Patch 2 and earlier and 15.5. The vulnerability could be exploited to allow an XML External Entity Injection.Show less
CVE-2020-25838
1Microfocus
1Filr
Jun 17, 2026
Dec 11, 2020
N/A· v4
6.5 MEDIUM· v3
4.0 MEDIUM· v2
Unauthorized disclosure of sensitive information vulnerability in Micro Focus Filr product. Affecting all 3.x and 4.x versions. The vulnerability could be exploited to disclose unauthorized sensitive information.
CVE-2020-25839
1Microfocus
1Identity Manager
Jun 17, 2026
Nov 20, 2020
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
NetIQ Identity Manager 4.8 prior to version 4.8 SP2 HF1 are affected by an injection vulnerability. This vulnerability is fixed in NetIQ IdM 4.8 SP2 HF1.
CVE-2020-25833
1Microfocus
1Idol
Jun 17, 2026
Nov 17, 2020
N/A· v4
4.8 MEDIUM· v3
3.5 LOW· v2
Persistent cross-Site Scripting vulnerability on Micro Focus IDOL product, affecting all version prior to version 12.7. The vulnerability could be exploited to perform Persistent XSS attack.
CVE-2020-25832
1Microfocus
1Filr
Jun 17, 2026
Nov 17, 2020
N/A· v4
5.4 MEDIUM· v3
3.5 LOW· v2
Reflected Cross Site scripting vulnerability on Micro Focus Filr product, affecting version 4.2.1. The vulnerability could be exploited to perform Reflected XSS attack.