Microfocus

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2019-11667 1Microfocus 1Service Manager Jun 17, 2026 Sep 17, 2019 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 Unauthorized access to contact information in Micro Focus Service Manager, versions 9.41, 9.50, 9.51, 9.52, 9.60, 9.61, 9.62. The vulnerability could be exploited to allow unauthorized access to private data.
CVE-2019-11660 1Microfocus 1Data Protector Jun 17, 2026 Sep 13, 2019 N/A· v4 7.8 HIGH· v3 7.2 HIGH· v2 Privileges manipulation in Micro Focus Data Protector, versions 10.00, 10.01, 10.02, 10.03, 10.04, 10.10, 10.20, 10.30, 10.40. This vulnerability could be exploited by a low-privileged user to execute a custom binary wit...Show more Privileges manipulation in Micro Focus Data Protector, versions 10.00, 10.01, 10.02, 10.03, 10.04, 10.10, 10.20, 10.30, 10.40. This vulnerability could be exploited by a low-privileged user to execute a custom binary with higher privileges.Show less
CVE-2019-11669 1Microfocus 1Service Manager Jun 17, 2026 Sep 10, 2019 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 Modifiable read only check box In Micro Focus Service Manager, versions 9.60p1, 9.61, 9.62. This vulnerability could be exploited to allow unauthorized modification of data.
CVE-2019-11668 1Microfocus 3Service Manager Service Manager Chat ServerService Manager Chat Service Jun 17, 2026 Sep 10, 2019 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 HTTP cookie in Micro Focus Service manager, Versions 9.30, 9.31, 9.32, 9.33, 9.34, 9.35, 9.40, 9.41, 9.50, 9.51, 9.52, 9.60, 9.61, 9.62. And Micro Focus Service Manager Chat Server, versions 9.41, 9.50, 9.51, 9.52, 9.60,...Show more HTTP cookie in Micro Focus Service manager, Versions 9.30, 9.31, 9.32, 9.33, 9.34, 9.35, 9.40, 9.41, 9.50, 9.51, 9.52, 9.60, 9.61, 9.62. And Micro Focus Service Manager Chat Server, versions 9.41, 9.50, 9.51, 9.52, 9.60, 9.61, 9.62. And Micro Focus Service Manager Chat Service 9.41, 9.50, 9.51, 9.52, 9.60, 9.61, 9.62.Show less
CVE-2019-11658 1Microfocus 1Content Manager Jun 17, 2026 Aug 30, 2019 N/A· v4 4.3 MEDIUM· v3 4.0 MEDIUM· v2 Information exposure in Micro Focus Content Manager, versions 9.1, 9.2 and 9.3. This vulnerability when configured to use an Oracle database, allows valid system users to gain access to a limited subset of records they w...Show more Information exposure in Micro Focus Content Manager, versions 9.1, 9.2 and 9.3. This vulnerability when configured to use an Oracle database, allows valid system users to gain access to a limited subset of records they would not normally be able to access when the system is in an undisclosed abnormal state.Show less
CVE-2019-11654 1Microfocus 1Verastream Host Integrator Jun 17, 2026 Aug 23, 2019 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 Path traversal vulnerability in Micro Focus Verastream Host Integrator (VHI), versions 7.7 SP2 and earlier, The vulnerability allows remote unauthenticated attackers to read arbitrary files.
CVE-2019-11652 1Microfocus 1Netiq Self Service Password Reset Jun 17, 2026 Aug 14, 2019 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 A potential authorization bypass issue was found in Micro Focus Self Service Password Reset (SSPR) versions prior to: 4.4.0.3, 4.3.0.6, and 4.2.0.6. Upgrade to Micro Focus Self Service Password Reset (SSPR) SSPR versions...Show more A potential authorization bypass issue was found in Micro Focus Self Service Password Reset (SSPR) versions prior to: 4.4.0.3, 4.3.0.6, and 4.2.0.6. Upgrade to Micro Focus Self Service Password Reset (SSPR) SSPR versions 4.4.0.3, 4.3.0.6, or 4.2.0.6 as appropriate.Show less
CVE-2019-11653 1Microfocus 1Content Manager Jun 17, 2026 Aug 7, 2019 N/A· v4 5.4 MEDIUM· v3 5.5 MEDIUM· v2 Remote Access Control Bypass in Micro Focus Content Manager. versions 9.1, 9.2, 9.3. The vulnerability could be exploited to manipulate data stored during another user’s CheckIn request.
CVE-2019-11650 1Microfocus 1Netiq Advanced Authentication Jun 17, 2026 Jul 10, 2019 N/A· v4 5.9 MEDIUM· v3 4.3 MEDIUM· v2 A potential Man in the Middle attack (MITM) was found in NetIQ Advanced Authentication Framework versions prior to 6.0.
CVE-2019-11647 1Microfocus 1Netiq Self Service Password Reset Jun 17, 2026 Jun 24, 2019 N/A· v4 6.1 MEDIUM· v3 4.3 MEDIUM· v2 A potential XSS exists in Self Service Password Reset, in Micro Focus NetIQ Software all versions prior to version 4.4. The vulnerability could be exploited to enable an XSS attack.
CVE-2019-11649 1Microfocus 1Fortify Software Security Center Jun 17, 2026 Jun 19, 2019 N/A· v4 5.4 MEDIUM· v3 3.5 LOW· v2 Cross-Site Scripting vulnerability in Micro Focus Fortify Software Security Center Server, versions 17.2, 18.1, 18.2, has been identified in Micro Focus Software Security Center. The vulnerability could be exploited to e...Show more Cross-Site Scripting vulnerability in Micro Focus Fortify Software Security Center Server, versions 17.2, 18.1, 18.2, has been identified in Micro Focus Software Security Center. The vulnerability could be exploited to execute JavaScript code in user’s browser. The vulnerability could be exploited to execute JavaScript code in user’s browser.Show less
CVE-2019-3477 1Microfocus 1Solutions Business Manager Jun 17, 2026 Jun 7, 2019 N/A· v4 6.1 MEDIUM· v3 5.8 MEDIUM· v2 Micro Focus Solution Business Manager versions prior to 11.4.2 is susceptible to open redirect.
CVE-2019-11646 1Microfocus 1Service Manager Jun 17, 2026 Jun 3, 2019 N/A· v4 8.8 HIGH· v3 9.0 HIGH· v2 Remote unauthorized command execution and unauthorized disclosure of information in Micro Focus Service Manager, versions 9.30, 9.31, 9.32, 9.33, 9.34, 9.35, 9.40, 9.41, 9.50, 9.51, 9.52, 9.60, 9.61. This vulnerability c...Show more Remote unauthorized command execution and unauthorized disclosure of information in Micro Focus Service Manager, versions 9.30, 9.31, 9.32, 9.33, 9.34, 9.35, 9.40, 9.41, 9.50, 9.51, 9.52, 9.60, 9.61. This vulnerability could allow Remote unauthorized command execution and unauthorized disclosure of information.Show less
CVE-2016-1600 1Microfocus 1Identity Manager Nov 21, 2024 May 9, 2019 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 The ServiceNow driver in NetIQ Identity Manager versions prior to 4.6 are susceptible to an information disclosure vulnerability.
CVE-2019-3490 1Microfocus 1Open Enterprise Server Jun 17, 2026 May 2, 2019 N/A· v4 6.1 MEDIUM· v3 4.3 MEDIUM· v2 A DOM based XSS vulnerability has been identified in the Netstorage component of Open Enterprise Server (OES) allowing a remote attacker to execute javascript in the victims browser by tricking the victim into clicking o...Show more A DOM based XSS vulnerability has been identified in the Netstorage component of Open Enterprise Server (OES) allowing a remote attacker to execute javascript in the victims browser by tricking the victim into clicking on a specially crafted link. This affects OES versions OES2015SP1, OES2018, and OES2018SP1. Older versions may be affected but were not tested as they are out of support.Show less
CVE-2019-3493 1Microfocus 2Network Automation Network Operations Management Jun 17, 2026 Apr 29, 2019 N/A· v4 8.8 HIGH· v3 6.5 MEDIUM· v2 A potential security vulnerability has been identified in Micro Focus Network Automation Software 9.20, 9.21, 10.00, 10.10, 10.20, 10.30, 10.40, 10.50, 2018.05, 2018.08, 2018.11, and Micro Focus Network Operations Manage...Show more A potential security vulnerability has been identified in Micro Focus Network Automation Software 9.20, 9.21, 10.00, 10.10, 10.20, 10.30, 10.40, 10.50, 2018.05, 2018.08, 2018.11, and Micro Focus Network Operations Management (NOM) all versions. The vulnerability could be remotely exploited to Remote Code Execution.Show less
CVE-2019-3489 1Microfocus 1Content Manager Jun 17, 2026 Apr 1, 2019 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 An unauthenticated file upload vulnerability has been identified in the Web Client component of Micro Focus Content Manager 9.1, 9.2, and 9.3 when configured to use the ADFS authentication method. The vulnerability could...Show more An unauthenticated file upload vulnerability has been identified in the Web Client component of Micro Focus Content Manager 9.1, 9.2, and 9.3 when configured to use the ADFS authentication method. The vulnerability could be exploited by an unauthenticated remote attacker to upload content to arbitrary locations on the Content Manager server.Show less
CVE-2018-19644 1Microfocus 1Solutions Business Manager Nov 21, 2024 Mar 27, 2019 N/A· v4 6.1 MEDIUM· v3 4.3 MEDIUM· v2 Reflected cross site script issue in Micro Focus Solutions Business Manager (SBM) (formerly Serena Business Manager (SBM)) versions prior to 11.5.
CVE-2018-19643 1Microfocus 1Solutions Business Manager Nov 21, 2024 Mar 27, 2019 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 Information leakage issue in Micro Focus Solutions Business Manager (SBM) (formerly Serena Business Manager (SBM)) versions prior to 11.5.
CVE-2018-19642 1Microfocus 1Solutions Business Manager Nov 21, 2024 Mar 27, 2019 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 Denial of service issue in Micro Focus Solutions Business Manager (SBM) (formerly Serena Business Manager (SBM)) versions prior to 11.5.

Previous 1...8910...14 Next