Micro Focus International

Records274All Threatist records

Exploited (KEV)2In CISA KEV

CVSS critical63CVSS 9.0–10.0

CVSS high95CVSS 7.0–8.9

Exploited now

Micro Focus International records in CISA KEV

TI-2021-05471 Micro Focus Operation Bridge Report (OBR) Remote Code Execution Vulnerability CRITICAL 100KEV 2021-11-03 TI-2021-05475 Micro Focus Access Manager Information Leakage Vulnerability CRITICAL 90KEV 2021-11-03

Components

Products in the NVD configurations · select one to filter the records

Imanager 22 records MEDIUM Access Manager 18 records CRITICAL Solutions Business Manager 17 records MEDIUM Edirectory 16 records HIGH Service Manager 16 records MEDIUM Enterprise Developer 12 records MEDIUM Enterprise Server 12 records MEDIUM Netiq Advanced Authentication 11 records MEDIUM

Records

9 records in Application Automation Tools · all components

TI-2021-05479 CVE-2021-22510 · GHSA-gc2r-ccfh-62v9

Cross-site scripting in Micro Focus Application Automation Tools Plugin - Jenkins plugin

LOW 35

Reflected XSS vulnerability in Micro Focus Application Automation Tools Plugin - Jenkins plugin.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.05152 Published 2021-04-08 Fixed in 6.8 CWE-79

TI-2021-05482 CVE-2021-22513 · GHSA-7qp2-rgxr-29q4

Missing authorization in Micro Focus Application Automation Tools Plugin - Jenkins plugin.

LOW 31

Missing Authorization vulnerability in Micro Focus Application Automation Tools Plugin - Jenkins plugin.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01226 Published 2021-04-08 Fixed in 7.2.3-beta CWE-862

TI-2021-05481 CVE-2021-22512 · GHSA-mwg2-3xpv-5v28

Cross-site request forgery in Micro Focus Application Automation Tools Plugin - Jenkins…

LOW 30

Cross-Site Request Forgery (CSRF) vulnerability in Micro Focus Application Automation Tools Plugin - Jenkins plugin.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00745 Published 2021-04-08 Fixed in 6.8 CWE-352

TI-2021-05480 CVE-2021-22511 · GHSA-q296-9j5x-fxf4

Improper certificate validation in Micro Focus Application Automation Tools Plugin…

LOW 29

Improper Certificate Validation vulnerability in Micro Focus Application Automation Tools Plugin - Jenkins plugin.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00404 Published 2021-04-08 Fixed in 6.8 CWE-295

TI-2024-03897 CVE-2024-4189 · GHSA-5h3x-3x9g-9c2m

Multiple XXE sinks in Run LoadRunner script step in OpenText Application Automation Tools

LOW 27

Improper Restriction of XML External Entity Reference vulnerability in OpenText Application Automation Tools allows DTD Injection.This issue affects OpenText Application Automation Tools: 24.1.0 and below.

CVSS 4.0MEDIUM 5.9 Network Low privileges User interaction EPSS 0.00474 Published 2024-10-16 No fix listed CWE-611

TI-2024-03892 CVE-2024-4184 · GHSA-8mj2-x5qq-7m6c

Multiple XXE sinks in ALM archive post-build step in OpenText Application Automation Tools

LOW 27

CVSS 4.0MEDIUM 5.9 Network Low privileges User interaction EPSS 0.00474 Published 2024-10-16 No fix listed CWE-611

TI-2024-04365 CVE-2024-4690 · GHSA-vfmw-mcw8-m32f

Insecure usage for DocumentBuilderFactory and TransformerFactory in OpenText Application Automation Tools

LOW 23

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.00403 Published 2024-10-16 No fix listed CWE-611

TI-2024-04366 CVE-2024-4692 · GHSA-gxhw-gx89-g9ch

Multiple missing permission checks

LOW 10

Improper Validation of Specified Quantity in Input vulnerability in OpenText OpenText Application Automation Tools allows Exploiting Incorrectly Configured Access Control Security Levels.

CVSS 4.0LOW 1.8 Network High privileges User interaction EPSS 0.00289 Published 2024-10-16 No fix listed CWE-280

TI-2024-03917 CVE-2024-4211 · GHSA-qrr4-q9rq-pfvg

Multiple missing permission checks

LOW 10

Improper Validation of Specified Quantity in Input vulnerability in OpenText OpenText Application Automation Tools allows Exploiting Incorrectly Configured Access Control Security Levels.

CVSS 4.0LOW 1.8 Network High privileges User interaction EPSS 0.00289 Published 2024-10-16 No fix listed CWE-280

Open these records in search →