Micro Focus International

Records274All Threatist records

Exploited (KEV)2In CISA KEV

CVSS critical63CVSS 9.0–10.0

CVSS high95CVSS 7.0–8.9

Exploited now

Micro Focus International records in CISA KEV

TI-2021-05471 Micro Focus Operation Bridge Report (OBR) Remote Code Execution Vulnerability CRITICAL 100KEV 2021-11-03 TI-2021-05475 Micro Focus Access Manager Information Leakage Vulnerability CRITICAL 90KEV 2021-11-03

Components

Products in the NVD configurations · select one to filter the records

Imanager 22 records MEDIUM Access Manager 18 records CRITICAL Solutions Business Manager 17 records MEDIUM Edirectory 16 records HIGH Service Manager 16 records MEDIUM Enterprise Developer 12 records MEDIUM Enterprise Server 12 records MEDIUM Netiq Advanced Authentication 11 records MEDIUM

Records

16 records in Edirectory · all components

TI-2012-00388 CVE-2012-0432 · GHSA-h43q-vm38-cg3c

Stack-based buffer overflow in the Novell NCP implementation in NetIQ eDirectory 8.8.7.x…

HIGH 77

Stack-based buffer overflow in the Novell NCP implementation in NetIQ eDirectory 8.8.7.x before 8.8.7.2 allows remote attackers to have an unspecified impact via unknown vectors.

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.58702 Published 2012-12-25 No fix listed CWE-119

TI-2021-15814 CVE-2021-38132 · GHSA-7v38-xc68-49j2

Possible External service interaction Vulnerability

MEDIUM 48

Possible External Service Interaction attack in eDirectory has been discovered in OpenText™ eDirectory.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00396 Published 2024-09-12 No fix listed CWE-918

TI-2017-06726 CVE-2017-9285 · GHSA-659h-cg37-9c4x

Login restrictions not applied when using ebaclient against NetIQ eDirectory EBA interface

MEDIUM 44

NetIQ eDirectory before 9.0 SP4 did not enforce login restrictions when "ebaclient" was used, allowing unpermitted access to eDirectory services.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.01189 Published 2018-03-02 Fixed in 9.0 SP4 CWE-284

TI-2021-05501 CVE-2021-22533 · GHSA-mfqr-wp5f-9gj8

Sensitive information in log files in OpenText eDirectory

MEDIUM 42

Possible Insertion of Sensitive Information into Log File Vulnerability in eDirectory has been discovered in OpenText™ eDirectory 9.2.4.0000.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00438 Published 2024-09-12 Fixed in < CWE-532

TI-2017-05081 CVE-2017-7429 · GHSA-9qwr-3g3j-q9gj

Fix for NetIQ shell code upload

MEDIUM 40

The certificate upload in NetIQ eDirectory PKI plugin before 8.8.8 Patch 10 Hotfix 1 could be abused to upload JSP code which could be used by authenticated attackers to execute JSP applets on the iManager server.

CVSS 3.0HIGH 8.8 Network Low privileges No interaction EPSS 0.00842 Published 2018-03-02 Fixed in 8.8.8 Patch 10 HF1 CWE-434

TI-2018-05541 CVE-2018-7686 · GHSA-864x-c48q-48jw

Information leakage vulnerability in NetIQ eDirectory before 9.1.1 HF1 due to shared memory usage.

LOW 36

Information leakage vulnerability in NetIQ eDirectory before 9.1.1 HF1 due to shared memory usage.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.01392 Published 2018-08-09 No fix listed CWE-200

TI-2018-12777 CVE-2018-17950 · GHSA-j6h7-3pc4-2m8j

Incorrect enforcement of authorization checks in eDirectory prior to 9.1 SP2

LOW 34

Incorrect enforcement of authorization checks in eDirectory prior to 9.1 SP2

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.00834 Published 2018-12-12 No fix listed CWE-863

TI-2021-05500 CVE-2021-22532 · GHSA-gmjh-p826-vp24

Resource allocation without limits in OpenText eDirectory

LOW 33

Possible NLDAP Denial of Service attack Vulnerability in eDirectory has been discovered in OpenText™ eDirectory before 9.2.4.0000.

CVSS 3.1HIGH 7.6 Network Low privileges No interaction EPSS 0.00369 Published 2024-09-12 Fixed in < CWE-770

TI-2012-00387 CVE-2012-0430 · GHSA-hmhq-j5fv-mcmr

Unspecified vulnerability in NetIQ eDirectory 8.8.6.x before 8.8.6.7 and 8.8.7.x before…

LOW 33

Unspecified vulnerability in NetIQ eDirectory 8.8.6.x before 8.8.6.7 and 8.8.7.x before 8.8.7.2 on Windows allows remote attackers to obtain an administrator cookie and bypass authorization checks via unknown vectors.

CVSS 2.0MEDIUM 6.4 Network No auth Interaction — EPSS 0.02207 Published 2012-12-25 No fix listed

TI-2021-15815 CVE-2021-38133 · GHSA-x6xc-qv8r-frvx

Possible Improper authentication Vulnerability in OpenText eDirectory

LOW 32

Possible External Service Interaction attack in eDirectory has been discovered in OpenText™ eDirectory.

CVSS 3.1HIGH 7.4 Network No auth User interaction EPSS 0.00346 Published 2024-09-12 No fix listed CWE-521

TI-2018-12778 CVE-2018-17952 · GHSA-q42x-mphp-89mv

Cross site scripting vulnerability in eDirectory prior to 9.1 SP2

LOW 28

Cross site scripting vulnerability in eDirectory prior to 9.1 SP2

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.00647 Published 2018-12-12 No fix listed CWE-79

TI-2018-05547 CVE-2018-7692 · GHSA-9637-f264-4x65

Unvalidated redirect vulnerability in in NetIQ eDirectory before 9.1.1 HF1.

LOW 28

Unvalidated redirect vulnerability in in NetIQ eDirectory before 9.1.1 HF1.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.00648 Published 2018-08-09 No fix listed CWE-601

TI-2021-15813 CVE-2021-38131 · GHSA-c9h3-w54v-5g3j

Cross-site scripting (XSS) in OpenText eDirectory

LOW 27

Possible Cross-Site Scripting (XSS) Vulnerability in eDirectory has been discovered in OpenText™ eDirectory 9.2.5.0000.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00245 Published 2024-09-12 No fix listed CWE-79

TI-2021-05472 CVE-2021-22503 · GHSA-5jrh-c32g-j2q9

Improper Neutralization of Input During Web Page Generation Vulnerability

LOW 27

Possible Improper Neutralization of Input During Web Page Generation Vulnerability in eDirectory has been discovered in OpenText™ eDirectory 9.2.3.0000.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00245 Published 2024-09-12 Fixed in < CWE-79

TI-2012-00385 CVE-2012-0428 · GHSA-8gqm-59h7-gqvf

Cross-site scripting (XSS) vulnerability in NetIQ eDirectory 8.8.6.x before 8.8.6.7 and…

LOW 24

Cross-site scripting (XSS) vulnerability in NetIQ eDirectory 8.8.6.x before 8.8.6.7 and 8.8.7.x before 8.8.7.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01792 Published 2012-12-25 No fix listed CWE-79

TI-2012-00386 CVE-2012-0429 · GHSA-c8vc-x3mc-c2g6

dhost in NetIQ eDirectory 8.8.6.x before 8.8.6.7 and 8.8.7.x before 8.8.7.2 on Windows…

LOW 23

dhost in NetIQ eDirectory 8.8.6.x before 8.8.6.7 and 8.8.7.x before 8.8.7.2 on Windows allows remote authenticated users to cause a denial of service (daemon crash) via crafted characters in an HTTP request.

CVSS 2.0MEDIUM 4.0 Network Low privileges Interaction — EPSS 0.01878 Published 2012-12-25 No fix listed

Open these records in search →

Critical	63
High	95
Medium	111
Low	5
No CVSS	0