← Back

Microfocus

microfocus

273 CVEs • 97 products

Products (97)

Click to collapse
Toggle
Imanager
imanager
22 CVEs
Access Manager
access_manager
18 CVEs
Solutions Business Manager
solutions_business_manager
17 CVEs
Edirectory
edirectory
16 CVEs
Service Manager
service_manager
16 CVEs
Enterprise Developer
enterprise_developer
12 CVEs
Enterprise Server
enterprise_server
12 CVEs
Netiq Advanced Authentication
netiq_advanced_authentication
11 CVEs
Arcsight Logger
arcsight_logger
9 CVEs
Application Automation Tools
application_automation_tools
9 CVEs
Arcsight Enterprise Security Manager
arcsight_enterprise_security_manager
8 CVEs
Arcsight Management Center
arcsight_management_center
8 CVEs
Operations Bridge
operations_bridge
7 CVEs
Operations Agent
operations_agent
7 CVEs
Filr
filr
6 CVEs
Operations Bridge Manager
operations_bridge_manager
6 CVEs
Visibroker
visibroker
5 CVEs
Application Performance Management
application_performance_management
5 CVEs
Netiq Access Manager
netiq_access_manager
5 CVEs
Sentinel
sentinel
4 CVEs
Fortify Software Security Center
fortify_software_security_center
4 CVEs
Service Management Automation
service_management_automation
4 CVEs
Netiq Self Service Password Reset
netiq_self_service_password_reset
4 CVEs
Verastream Host Integrator
verastream_host_integrator
4 CVEs
Operation Bridge Reporter
operation_bridge_reporter
4 CVEs
Privileged User Manager
privileged_user_manager
3 CVEs
Rumba
rumba
3 CVEs
Enterprise Server Monitor And Control
enterprise_server_monitor_and_control
3 CVEs
Identity Manager
identity_manager
3 CVEs
Project And Portfolio Management
project_and_portfolio_management
3 CVEs
Secure Messaging Gateway
secure_messaging_gateway
3 CVEs
Data Center Automation
data_center_automation
3 CVEs
Hybrid Cloud Management
hybrid_cloud_management
3 CVEs
Network Operations Management
network_operations_management
3 CVEs
Data Protector
data_protector
3 CVEs
Content Manager
content_manager
3 CVEs
Dimensions Cm
dimensions_cm
3 CVEs
Self Service Password Reset
self_service_password_reset
2 CVEs
Directory Server
directory_server
2 CVEs
Bi Directional Driver
bi-directional_driver
2 CVEs
Ucmdb Configuration Manager
ucmdb_configuration_manager
2 CVEs
Cms Server
cms_server
2 CVEs
Groupwise
groupwise
2 CVEs
Network Automation
network_automation
2 CVEs
Service Manager Automation
service_manager_automation
2 CVEs
Cobol Server
cobol_server
2 CVEs
Enterprise Test Server
enterprise_test_server
2 CVEs
Visual Cobol
visual_cobol
2 CVEs
Netiq Privileged Access Manager
netiq_privileged_access_manager
2 CVEs
Cobol
cobol
1 CVE
Sentinel Agent Manager
sentinel_agent_manager
1 CVE
Security Manager
security_manager
1 CVE
Security Solutions For Iseries
security_solutions_for_iseries
1 CVE
Accurev
accurev
1 CVE
Rumba Ftp
rumba_ftp
1 CVE
Host Access Management And Security Server
host_access_management_and_security_server
1 CVE
Reflection For The Web
reflection_for_the_web
1 CVE
Reflection Security Gateway
reflection_security_gateway
1 CVE
Reflection Zfe
reflection_zfe
1 CVE
Connected Backup
connected_backup
1 CVE
Operations Manager I
operations_manager_i
1 CVE
Fortify Audit Workbench
fortify_audit_workbench
1 CVE
Universal Cmdb Foundation Software
universal_cmdb_foundation_software
1 CVE
Project And Portfolio Management Center
project_and_portfolio_management_center
1 CVE
Client
client
1 CVE
Universal Cmdb
universal_cmdb
1 CVE
Universal Cmdb Browser
universal_cmdb_browser
1 CVE
Universal Cmbd Browser
universal_cmbd_browser
1 CVE
Universal Cmbd Server
universal_cmbd_server
1 CVE
Network Virtualization
network_virtualization
1 CVE
Service Virtualization
service_virtualization
1 CVE
Unified Functional Testing
unified_functional_testing
1 CVE
Real User Monitoring
real_user_monitoring
1 CVE
Netware
netware
1 CVE
Netiq Edirectory
netiq_edirectory
1 CVE
Open Enterprise Server
open_enterprise_server
1 CVE
Service Manager Chat Server
service_manager_chat_server
1 CVE
Service Manager Chat Service
service_manager_chat_service
1 CVE
Acutoweb
acutoweb
1 CVE
Vibe
vibe
1 CVE
Arcsight Enterprise Security Manager Express
arcsight_enterprise_security_manager_express
1 CVE
Operation Bridge Manager
operation_bridge_manager
1 CVE
Idol
idol
1 CVE
Application Lifecycle Management
application_lifecycle_management
1 CVE
Sitescope
sitescope
1 CVE
Secure Api Manager
secure_api_manager
1 CVE
Zenworks Configuration Management
zenworks_configuration_management
1 CVE
Zenworks Endpoint Security Management
zenworks_endpoint_security_management
1 CVE
Netiq Directory And Resource Administrator
netiq_directory_and_resource_administrator
1 CVE
Voltage Securemail
voltage_securemail
1 CVE
Zenworks
zenworks
1 CVE
Asset Management X
asset_management_x
1 CVE
Service Management Automation X
service_management_automation_x
1 CVE
Fortify Scancentral Dast
fortify_scancentral_dast
1 CVE
Vertica
vertica
1 CVE
Arcsight Platform
arcsight_platform
1 CVE
Autopass License Server
autopass_license_server
0 CVEs

CVEs (273)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2017-7429
2Microfocus
Netiq
2Edirectory
Edirectory
Nov 21, 2024
Mar 2, 2018
N/A· v4
8.8 HIGH· v3
6.5 MEDIUM· v2
The certificate upload in NetIQ eDirectory PKI plugin before 8.8.8 Patch 10 Hotfix 1 could be abused to upload JSP code which could be used by authenticated attackers to execute JSP applets on the iManager server.
CVE-2018-6489
1Microfocus
1Project And Portfolio Management Center
Jun 17, 2026
Feb 22, 2018
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
XML External Entity (XXE) vulnerability in Micro Focus Project and Portfolio Management Center, version 9.32. This vulnerability can be exploited to allow XML External Entity (XXE)
CVE-2018-6488
1Microfocus
1Ucmdb Configuration Manager
Jun 17, 2026
Feb 22, 2018
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
Arbitrary Code Execution vulnerability in Micro Focus Universal CMDB, version 4.10, 4.11, 4.12. This vulnerability could be remotely exploited to allow Arbitrary Code Execution.
CVE-2018-6487
1Microfocus
1Universal Cmdb Foundation Software
Jun 17, 2026
Feb 20, 2018
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
Remote Disclosure of Information in Micro Focus Universal CMDB Foundation Software, version numbers 10.10, 10.11, 10.20, 10.21, 10.22, 10.30, 10.31, 4.10, 4.11. This vulnerability could be remotely exploited to allow dis...Show more
Remote Disclosure of Information in Micro Focus Universal CMDB Foundation Software, version numbers 10.10, 10.11, 10.20, 10.21, 10.22, 10.30, 10.31, 4.10, 4.11. This vulnerability could be remotely exploited to allow disclosure of information.Show less
CVE-2017-8993
1Microfocus
1Project And Portfolio Management
Nov 21, 2024
Feb 15, 2018
N/A· v4
5.4 MEDIUM· v3
3.5 LOW· v2
A Remote Cross-Site Scripting vulnerability in HPE Project and Portfolio Management (PPM) version v9.30, v9.31, v9.32, v9.40 was found.
CVE-2018-6486
1Microfocus
2Fortify Audit Workbench
Fortify Software Security Center
Jun 17, 2026
Feb 2, 2018
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
XML External Entity (XXE) vulnerability in Micro Focus Fortify Audit Workbench (AWB) and Micro Focus Fortify Software Security Center (SSC), versions 16.10, 16.20, 17.10. This vulnerability could be exploited to allow a...Show more
XML External Entity (XXE) vulnerability in Micro Focus Fortify Audit Workbench (AWB) and Micro Focus Fortify Software Security Center (SSC), versions 16.10, 16.20, 17.10. This vulnerability could be exploited to allow a XML External Entity (XXE) injection.Show less
CVE-2017-14363
1Microfocus
1Operations Manager I
May 13, 2026
Dec 21, 2017
N/A· v4
5.4 MEDIUM· v3
3.5 LOW· v2
Cross-Site Scripting (XSS) vulnerability has been identified in Micro Focus Operations Manager i, versions 10.60, 10.61, 10.62. The vulnerability could be remotely exploited to allow Cross-Site Scripting (XSS).
CVE-2017-14362
1Microfocus
1Project And Portfolio Management
May 13, 2026
Dec 13, 2017
N/A· v4
7.3 HIGH· v3
6.8 MEDIUM· v2
Cross-Site Request Forgery vulnerability in Micro Focus Project and Portfolio Management Center, version 9.32. This vulnerability could be exploited to allow a Cross-Site Forgery attack.
CVE-2017-14361
1Microfocus
1Project And Portfolio Management
May 13, 2026
Dec 13, 2017
N/A· v4
7.4 HIGH· v3
5.8 MEDIUM· v2
Man-In-The-Middle vulnerability in Micro Focus Project and Portfolio Management Center, version 9.32. This vulnerability could be exploited to allow a Man-in-the-middle attack.
CVE-2017-14355
1Microfocus
1Connected Backup
May 13, 2026
Dec 5, 2017
N/A· v4
7.8 HIGH· v3
7.2 HIGH· v2
A potential security vulnerability has been identified in HPE Connected Backup versions 8.6 and 8.8.6. The vulnerability could be exploited locally to allow escalation of privilege.
CVE-2017-9273
1Microfocus
1Bi Directional Driver
May 13, 2026
Oct 6, 2017
N/A· v4
5.3 MEDIUM· v3
5.0 MEDIUM· v2
The Bi-directional driver in IDM 4.5 before 4.0.3.0 could be susceptible to unauthorized log configuration changes.
CVE-2017-9272
1Microfocus
1Bi Directional Driver
May 13, 2026
Oct 6, 2017
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
The Bi-directional driver in IDM 4.5 before 4.0.3.0 could be susceptible to a denial of service attack.
CVE-2017-9283
1Microfocus
1Visibroker
May 13, 2026
Sep 21, 2017
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
An out-of-bounds read (CWE-125) vulnerability exists in Micro Focus VisiBroker 8.5. The feasibility of leveraging this vulnerability for further attacks was not assessed.
CVE-2017-9282
1Microfocus
1Visibroker
May 13, 2026
Sep 21, 2017
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
An integer overflow (CWE-190) led to an out-of-bounds write (CWE-787) on a heap-allocated area, leading to heap corruption in Micro Focus VisiBroker 8.5. The feasibility of leveraging this vulnerability for further attac...Show more
An integer overflow (CWE-190) led to an out-of-bounds write (CWE-787) on a heap-allocated area, leading to heap corruption in Micro Focus VisiBroker 8.5. The feasibility of leveraging this vulnerability for further attacks was not assessed.Show less
CVE-2017-9281
1Microfocus
1Visibroker
May 13, 2026
Sep 21, 2017
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
An integer overflow (CWE-190) potentially causing an out-of-bounds read (CWE-125) vulnerability in Micro Focus VisiBroker 8.5 can lead to a denial of service.
CVE-2017-7424
1Microfocus
2Enterprise Developer
Enterprise Server
May 13, 2026
Aug 21, 2017
N/A· v4
6.5 MEDIUM· v3
4.0 MEDIUM· v2
A Path Traversal (CWE-22) vulnerability in esfadmingui in Micro Focus Enterprise Developer and Enterprise Server 2.3, 2.3 Update 1 before Hotfix 8, and 2.3 Update 2 before Hotfix 9 allows remote authenticated users to do...Show more
A Path Traversal (CWE-22) vulnerability in esfadmingui in Micro Focus Enterprise Developer and Enterprise Server 2.3, 2.3 Update 1 before Hotfix 8, and 2.3 Update 2 before Hotfix 9 allows remote authenticated users to download arbitrary files from a system running the product, if this component is configured. Note esfadmingui is not enabled by default.Show less
CVE-2017-7423
1Microfocus
2Enterprise Developer
Enterprise Server
May 13, 2026
Aug 21, 2017
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
A Cross-Site Request Forgery (CWE-352) vulnerability in esfadmingui in Micro Focus Enterprise Developer and Enterprise Server 2.3, 2.3 Update 1 before Hotfix 8, and 2.3 Update 2 before Hotfix 9 allows remote unauthentica...Show more
A Cross-Site Request Forgery (CWE-352) vulnerability in esfadmingui in Micro Focus Enterprise Developer and Enterprise Server 2.3, 2.3 Update 1 before Hotfix 8, and 2.3 Update 2 before Hotfix 9 allows remote unauthenticated attackers to forge requests, if this component is configured. This includes creating new privileged credentials, resulting in privilege elevation (CWE-275). Note esfadmingui is not enabled by default.Show less
CVE-2017-7422
1Microfocus
2Enterprise Developer
Enterprise Server
May 13, 2026
Aug 21, 2017
N/A· v4
5.4 MEDIUM· v3
3.5 LOW· v2
Reflected and stored Cross-Site Scripting (XSS, CWE-79) vulnerabilities in esfadmingui in Micro Focus Enterprise Developer and Enterprise Server 2.3, 2.3 Update 1 before Hotfix 8, and 2.3 Update 2 before Hotfix 9 allow r...Show more
Reflected and stored Cross-Site Scripting (XSS, CWE-79) vulnerabilities in esfadmingui in Micro Focus Enterprise Developer and Enterprise Server 2.3, 2.3 Update 1 before Hotfix 8, and 2.3 Update 2 before Hotfix 9 allow remote authenticated attackers to bypass protection mechanisms (CWE-693) and other security features, if this component is configured. Note esfadmingui is not enabled by default.Show less
CVE-2017-7421
1Microfocus
4Directory Server
Enterprise DeveloperEnterprise Server+1 more
May 13, 2026
Aug 21, 2017
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
Reflected and stored Cross-Site Scripting (XSS, CWE-79) vulnerabilities in Directory Server (aka Enterprise Server Administration web UI) and ESMAC (aka Enterprise Server Monitor and Control) in Micro Focus Enterprise De...Show more
Reflected and stored Cross-Site Scripting (XSS, CWE-79) vulnerabilities in Directory Server (aka Enterprise Server Administration web UI) and ESMAC (aka Enterprise Server Monitor and Control) in Micro Focus Enterprise Developer and Enterprise Server 2.3 and earlier, 2.3 Update 1 before Hotfix 8, and 2.3 Update 2 before Hotfix 9 allow remote authenticated attackers to bypass protection mechanisms (CWE-693) and other security features.Show less
CVE-2017-7420
1Microfocus
3Enterprise Developer
Enterprise ServerEnterprise Server Monitor And Control
May 13, 2026
Aug 21, 2017
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
An Authentication Bypass (CWE-287) vulnerability in ESMAC (aka Enterprise Server Monitor and Control) in Micro Focus Enterprise Developer and Enterprise Server 2.3 and earlier, 2.3 Update 1 before Hotfix 8, and 2.3 Updat...Show more
An Authentication Bypass (CWE-287) vulnerability in ESMAC (aka Enterprise Server Monitor and Control) in Micro Focus Enterprise Developer and Enterprise Server 2.3 and earlier, 2.3 Update 1 before Hotfix 8, and 2.3 Update 2 before Hotfix 9 allows remote unauthenticated attackers to view and alter configuration information and alter the state of the running product (CWE-275).Show less