← Back

Microfocus

microfocus

273 CVEs • 97 products

Products (97)

Click to collapse
Toggle
Imanager
imanager
22 CVEs
Access Manager
access_manager
18 CVEs
Solutions Business Manager
solutions_business_manager
17 CVEs
Edirectory
edirectory
16 CVEs
Service Manager
service_manager
16 CVEs
Enterprise Developer
enterprise_developer
12 CVEs
Enterprise Server
enterprise_server
12 CVEs
Netiq Advanced Authentication
netiq_advanced_authentication
11 CVEs
Arcsight Logger
arcsight_logger
9 CVEs
Application Automation Tools
application_automation_tools
9 CVEs
Arcsight Enterprise Security Manager
arcsight_enterprise_security_manager
8 CVEs
Arcsight Management Center
arcsight_management_center
8 CVEs
Operations Bridge
operations_bridge
7 CVEs
Operations Agent
operations_agent
7 CVEs
Filr
filr
6 CVEs
Operations Bridge Manager
operations_bridge_manager
6 CVEs
Visibroker
visibroker
5 CVEs
Application Performance Management
application_performance_management
5 CVEs
Netiq Access Manager
netiq_access_manager
5 CVEs
Sentinel
sentinel
4 CVEs
Fortify Software Security Center
fortify_software_security_center
4 CVEs
Service Management Automation
service_management_automation
4 CVEs
Netiq Self Service Password Reset
netiq_self_service_password_reset
4 CVEs
Verastream Host Integrator
verastream_host_integrator
4 CVEs
Operation Bridge Reporter
operation_bridge_reporter
4 CVEs
Privileged User Manager
privileged_user_manager
3 CVEs
Rumba
rumba
3 CVEs
Enterprise Server Monitor And Control
enterprise_server_monitor_and_control
3 CVEs
Identity Manager
identity_manager
3 CVEs
Project And Portfolio Management
project_and_portfolio_management
3 CVEs
Secure Messaging Gateway
secure_messaging_gateway
3 CVEs
Data Center Automation
data_center_automation
3 CVEs
Hybrid Cloud Management
hybrid_cloud_management
3 CVEs
Network Operations Management
network_operations_management
3 CVEs
Data Protector
data_protector
3 CVEs
Content Manager
content_manager
3 CVEs
Dimensions Cm
dimensions_cm
3 CVEs
Self Service Password Reset
self_service_password_reset
2 CVEs
Directory Server
directory_server
2 CVEs
Bi Directional Driver
bi-directional_driver
2 CVEs
Ucmdb Configuration Manager
ucmdb_configuration_manager
2 CVEs
Cms Server
cms_server
2 CVEs
Groupwise
groupwise
2 CVEs
Network Automation
network_automation
2 CVEs
Service Manager Automation
service_manager_automation
2 CVEs
Cobol Server
cobol_server
2 CVEs
Enterprise Test Server
enterprise_test_server
2 CVEs
Visual Cobol
visual_cobol
2 CVEs
Netiq Privileged Access Manager
netiq_privileged_access_manager
2 CVEs
Cobol
cobol
1 CVE
Sentinel Agent Manager
sentinel_agent_manager
1 CVE
Security Manager
security_manager
1 CVE
Security Solutions For Iseries
security_solutions_for_iseries
1 CVE
Accurev
accurev
1 CVE
Rumba Ftp
rumba_ftp
1 CVE
Host Access Management And Security Server
host_access_management_and_security_server
1 CVE
Reflection For The Web
reflection_for_the_web
1 CVE
Reflection Security Gateway
reflection_security_gateway
1 CVE
Reflection Zfe
reflection_zfe
1 CVE
Connected Backup
connected_backup
1 CVE
Operations Manager I
operations_manager_i
1 CVE
Fortify Audit Workbench
fortify_audit_workbench
1 CVE
Universal Cmdb Foundation Software
universal_cmdb_foundation_software
1 CVE
Project And Portfolio Management Center
project_and_portfolio_management_center
1 CVE
Client
client
1 CVE
Universal Cmdb
universal_cmdb
1 CVE
Universal Cmdb Browser
universal_cmdb_browser
1 CVE
Universal Cmbd Browser
universal_cmbd_browser
1 CVE
Universal Cmbd Server
universal_cmbd_server
1 CVE
Network Virtualization
network_virtualization
1 CVE
Service Virtualization
service_virtualization
1 CVE
Unified Functional Testing
unified_functional_testing
1 CVE
Real User Monitoring
real_user_monitoring
1 CVE
Netware
netware
1 CVE
Netiq Edirectory
netiq_edirectory
1 CVE
Open Enterprise Server
open_enterprise_server
1 CVE
Service Manager Chat Server
service_manager_chat_server
1 CVE
Service Manager Chat Service
service_manager_chat_service
1 CVE
Acutoweb
acutoweb
1 CVE
Vibe
vibe
1 CVE
Arcsight Enterprise Security Manager Express
arcsight_enterprise_security_manager_express
1 CVE
Operation Bridge Manager
operation_bridge_manager
1 CVE
Idol
idol
1 CVE
Application Lifecycle Management
application_lifecycle_management
1 CVE
Sitescope
sitescope
1 CVE
Secure Api Manager
secure_api_manager
1 CVE
Zenworks Configuration Management
zenworks_configuration_management
1 CVE
Zenworks Endpoint Security Management
zenworks_endpoint_security_management
1 CVE
Netiq Directory And Resource Administrator
netiq_directory_and_resource_administrator
1 CVE
Voltage Securemail
voltage_securemail
1 CVE
Zenworks
zenworks
1 CVE
Asset Management X
asset_management_x
1 CVE
Service Management Automation X
service_management_automation_x
1 CVE
Fortify Scancentral Dast
fortify_scancentral_dast
1 CVE
Vertica
vertica
1 CVE
Arcsight Platform
arcsight_platform
1 CVE
Autopass License Server
autopass_license_server
0 CVEs

CVEs (273)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2021-22535
1Microfocus
1Netiq Directory And Resource Administrator
Jun 17, 2026
Sep 28, 2021
N/A· v4
4.9 MEDIUM· v3
2.7 LOW· v2
Unauthorized information security disclosure vulnerability on Micro Focus Directory and Resource Administrator (DRA) product, affecting all DRA versions prior to 10.1 Patch 1. The vulnerability could lead to unauthorized...Show more
Unauthorized information security disclosure vulnerability on Micro Focus Directory and Resource Administrator (DRA) product, affecting all DRA versions prior to 10.1 Patch 1. The vulnerability could lead to unauthorized information disclosure.Show less
CVE-2021-22528
1Microfocus
1Access Manager
Jun 17, 2026
Sep 13, 2021
N/A· v4
5.4 MEDIUM· v3
3.5 LOW· v2
Reflected Cross Site Scripting (XSS) vulnerability in NetIQ Access Manager prior to 5.0.1 and 4.5.4
CVE-2021-22527
1Microfocus
1Access Manager
Jun 17, 2026
Sep 13, 2021
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
Information leakage vulnerability in NetIQ Access Manager prior to 5.0.1 and 4.5.4
CVE-2021-22526
1Microfocus
1Access Manager
Jun 17, 2026
Sep 13, 2021
N/A· v4
6.1 MEDIUM· v3
5.8 MEDIUM· v2
Open Redirection vulnerability in NetIQ Access Manager prior to 5.0.1 and 4.5.4
CVE-2021-22524
1Microfocus
1Access Manager
Jun 17, 2026
Sep 13, 2021
N/A· v4
4.9 MEDIUM· v3
4.0 MEDIUM· v2
Injection attack caused the denial of service vulnerability in NetIQ Access Manager prior to 5.0.1 and 4.5.4
CVE-2021-38123
1Microfocus
1Network Automation
Jun 17, 2026
Sep 7, 2021
N/A· v4
6.1 MEDIUM· v3
5.8 MEDIUM· v2
Open Redirect vulnerability in Micro Focus Network Automation, affecting Network Automation versions 10.4x, 10.5x, 2018.05, 2018.11, 2019.05, 2020.02, 2020.08, 2020.11, 2021.05. The vulnerability could allow redirect use...Show more
Open Redirect vulnerability in Micro Focus Network Automation, affecting Network Automation versions 10.4x, 10.5x, 2018.05, 2018.11, 2019.05, 2020.02, 2020.08, 2020.11, 2021.05. The vulnerability could allow redirect users to malicious websites after authentication.Show less
CVE-2021-22525
1Microfocus
1Access Manager
Jun 17, 2026
Sep 2, 2021
N/A· v4
5.5 MEDIUM· v3
2.1 LOW· v2
This release addresses a potential information leakage vulnerability in NetIQ Access Manager versions prior to 5.0.1
CVE-2021-22517
1Microfocus
1Data Protector
Jun 17, 2026
Aug 5, 2021
N/A· v4
8.8 HIGH· v3
6.5 MEDIUM· v2
A potential unauthorized privilege escalation vulnerability has been identified in Micro Focus Data Protector. The vulnerability affects versions 10.10, 10.20, 10.30, 10.40, 10.50, 10.60, 10.70, 10.80, 10.0 and 10.91. A...Show more
A potential unauthorized privilege escalation vulnerability has been identified in Micro Focus Data Protector. The vulnerability affects versions 10.10, 10.20, 10.30, 10.40, 10.50, 10.60, 10.70, 10.80, 10.0 and 10.91. A privileged user may potentially misuse this feature and thus allow unintended and unauthorized access of data.Show less
CVE-2021-22521
1Microfocus
2Zenworks Configuration Management
Zenworks Endpoint Security Management
Jun 17, 2026
Jul 30, 2021
N/A· v4
6.7 MEDIUM· v3
7.2 HIGH· v2
A privileged escalation vulnerability has been identified in Micro Focus ZENworks Configuration Management, affecting version 2020 Update 1 and all prior versions. The vulnerability could be exploited to gain unauthorize...Show more
A privileged escalation vulnerability has been identified in Micro Focus ZENworks Configuration Management, affecting version 2020 Update 1 and all prior versions. The vulnerability could be exploited to gain unauthorized system privileges.Show less
CVE-2021-22523
1Microfocus
1Verastream Host Integrator
Jun 17, 2026
Jul 22, 2021
N/A· v4
7.6 HIGH· v3
6.8 MEDIUM· v2
XML External Entity vulnerability in Micro Focus Verastream Host Integrator, affecting version 7.8 Update 1 and earlier versions. The vulnerability could allow the control of web browser and hijacking user sessions.
CVE-2021-22522
1Microfocus
1Verastream Host Integrator
Jun 17, 2026
Jul 22, 2021
N/A· v4
7.1 HIGH· v3
6.8 MEDIUM· v2
Reflected Cross-Site Scripting vulnerability in Micro Focus Verastream Host Integrator, affecting version version 7.8 Update 1 and earlier versions. The vulnerability could allow disclosure of confidential data.
CVE-2021-22515
1Microfocus
1Netiq Advanced Authentication
Jun 17, 2026
Jul 12, 2021
N/A· v4
6.5 MEDIUM· v3
4.0 MEDIUM· v2
Multi-Factor Authentication (MFA) functionality can be bypassed, allowing the use of single factor authentication in NetIQ Advanced Authentication versions prior to 6.3 SP4 Patch 1.
CVE-2021-22516
1Microfocus
1Secure Api Manager
Jun 17, 2026
Jun 4, 2021
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
Insertion of Sensitive Information into Log File vulnerability in Micro Focus Secure API Manager (SAPIM) product, affecting version 2.0.0. The vulnerability could lead to sensitive information being in a log file.
CVE-2021-22519
1Microfocus
1Sitescope
Jun 17, 2026
May 28, 2021
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
Execute arbitrary code vulnerability in Micro Focus SiteScope product, affecting versions 11.40,11.41 , 2018.05(11.50), 2018.08(11.51), 2018.11(11.60), 2019.02(11.70), 2019.05(11.80), 2019.08(11.90), 2019.11(11.91), 2020...Show more
Execute arbitrary code vulnerability in Micro Focus SiteScope product, affecting versions 11.40,11.41 , 2018.05(11.50), 2018.08(11.51), 2018.11(11.60), 2019.02(11.70), 2019.05(11.80), 2019.08(11.90), 2019.11(11.91), 2020.05(11.92), 2020.10(11.93). The vulnerability could allow remote attackers to execute arbitrary code on affected installations of SiteScope.Show less
CVE-2021-22514
1Microfocus
1Application Performance Management
Jun 17, 2026
Apr 28, 2021
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
An arbitrary code execution vulnerability exists in Micro Focus Application Performance Management, affecting versions 9.40, 9.50 and 9.51. The vulnerability could allow remote attackers to execute arbitrary code on affe...Show more
An arbitrary code execution vulnerability exists in Micro Focus Application Performance Management, affecting versions 9.40, 9.50 and 9.51. The vulnerability could allow remote attackers to execute arbitrary code on affected installations of APM.Show less
CVE-2021-22505
1Microfocus
1Operations Agent
Jun 17, 2026
Apr 13, 2021
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
Escalation of privileges vulnerability in Micro Focus Operations Agent, affects versions 12.0x, 12.10, 12.11, 12.12, 12.14 and 12.15. The vulnerability could be exploited to escalate privileges and execute code under the...Show more
Escalation of privileges vulnerability in Micro Focus Operations Agent, affects versions 12.0x, 12.10, 12.11, 12.12, 12.14 and 12.15. The vulnerability could be exploited to escalate privileges and execute code under the account of the Operations Agent.Show less
CVE-2021-22497
1Microfocus
1Netiq Advanced Authentication
Jun 17, 2026
Apr 12, 2021
N/A· v4
7.2 HIGH· v3
6.5 MEDIUM· v2
Advanced Authentication versions prior to 6.3 SP4 have a potential broken authentication due to improper session management issue.
CVE-2021-22513
1Microfocus
1Application Automation Tools
Jun 17, 2026
Apr 8, 2021
N/A· v4
6.5 MEDIUM· v3
4.0 MEDIUM· v2
Missing Authorization vulnerability in Micro Focus Application Automation Tools Plugin - Jenkins plugin. The vulnerability affects version 6.7 and earlier versions. The vulnerability could allow access without permission...Show more
Missing Authorization vulnerability in Micro Focus Application Automation Tools Plugin - Jenkins plugin. The vulnerability affects version 6.7 and earlier versions. The vulnerability could allow access without permission checks.Show less
CVE-2021-22512
1Microfocus
1Application Automation Tools
Jun 17, 2026
Apr 8, 2021
N/A· v4
6.5 MEDIUM· v3
4.3 MEDIUM· v2
Cross-Site Request Forgery (CSRF) vulnerability in Micro Focus Application Automation Tools Plugin - Jenkins plugin. The vulnerability affects version 6.7 and earlier versions. The vulnerability could allow form validati...Show more
Cross-Site Request Forgery (CSRF) vulnerability in Micro Focus Application Automation Tools Plugin - Jenkins plugin. The vulnerability affects version 6.7 and earlier versions. The vulnerability could allow form validation without permission checks.Show less
CVE-2021-22511
1Microfocus
1Application Automation Tools
Jun 17, 2026
Apr 8, 2021
N/A· v4
6.5 MEDIUM· v3
6.4 MEDIUM· v2
Improper Certificate Validation vulnerability in Micro Focus Application Automation Tools Plugin - Jenkins plugin. The vulnerability affects version 6.7 and earlier versions. The vulnerability could allow unconditionally...Show more
Improper Certificate Validation vulnerability in Micro Focus Application Automation Tools Plugin - Jenkins plugin. The vulnerability affects version 6.7 and earlier versions. The vulnerability could allow unconditionally disabling of SSL/TLS certificates.Show less