Micro Focus International

Records274All Threatist records

Exploited (KEV)2In CISA KEV

CVSS critical63CVSS 9.0–10.0

CVSS high95CVSS 7.0–8.9

Exploited now

Micro Focus International records in CISA KEV

TI-2021-05471 Micro Focus Operation Bridge Report (OBR) Remote Code Execution Vulnerability CRITICAL 100KEV 2021-11-03 TI-2021-05475 Micro Focus Access Manager Information Leakage Vulnerability CRITICAL 90KEV 2021-11-03

Components

Products in the NVD configurations · select one to filter the records

Imanager 22 records MEDIUM Access Manager 18 records CRITICAL Solutions Business Manager 17 records MEDIUM Edirectory 16 records HIGH Service Manager 16 records MEDIUM Enterprise Developer 12 records MEDIUM Enterprise Server 12 records MEDIUM Netiq Advanced Authentication 11 records MEDIUM

Records

22 records in Imanager · all components

TI-2023-10087 CVE-2023-24466 · GHSA-3vp6-4284-wj7c

Possible XML External Entity Injection in OpenText iManager

MEDIUM 49

Possible XML External Entity Injection in iManager GET parameter has been discovered in OpenText™ iManager 3.2.6.0200.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00535 Published 2024-11-22 No fix listed CWE-611

TI-2021-15817 CVE-2021-38135 · GHSA-mh6w-9w29-7xph

Possible External service interaction Vulnerability in OpenText iManager

MEDIUM 48

Possible External Service Interaction attack in iManager has been discovered in OpenText™ iManager 3.2.6.0000.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00453 Published 2024-11-22 No fix listed CWE-406

TI-2024-03248 CVE-2024-3483 · GHSA-q3jf-xfc9-6rc2

Remote Code Execution vulnerability in the iManager

MEDIUM 45

Remote Code Execution has been discovered in OpenText™ iManager 3.2.6.0200.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00983 Published 2024-05-15 No fix listed CWE-434

TI-2023-10088 CVE-2023-24467 · GHSA-g6hx-mx2f-fvx9

Possible Command Injection in OpenText iManager

MEDIUM 45

Possible Command Injection in iManager GET parameter has been discovered in OpenText™ iManager 3.2.6.0000.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01106 Published 2024-11-22 No fix listed CWE-77

TI-2021-15800 CVE-2021-38117 · GHSA-x749-4jc5-gxmr

Possible Remote Code Execution Vulnerability OpenText iManager

MEDIUM 45

Possible Command injection Vulnerability in iManager has been discovered in OpenText™ iManager 3.2.4.0000.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01143 Published 2024-11-22 No fix listed CWE-94

TI-2024-03702 CVE-2024-3968 · GHSA-c5q5-64hr-5mwm

Remote Code Execution vulnerability in the iManager

MEDIUM 44

Remote Code Execution has been discovered in OpenText™ iManager 3.2.6.0200.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00678 Published 2024-05-15 No fix listed CWE-20

TI-2024-03701 CVE-2024-3967 · GHSA-8483-3cvj-46c5

Remote Code Execution vulnerability in the iManager

MEDIUM 44

Remote Code Execution has been discovered in OpenText™ iManager 3.2.6.0200.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00635 Published 2024-05-15 No fix listed CWE-502

TI-2024-03703 CVE-2024-3969

XML External Entity injection vulnerability in iManager

MEDIUM 43

XML External Entity injection vulnerability found in OpenText™ iManager 3.2.6.0200.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.005 Published 2024-05-28 No fix listed CWE-611

TI-2024-03252 CVE-2024-3487 · GHSA-cj69-9qw7-84pj

Broken Authentication vulnerability in iManager

MEDIUM 43

Broken Authentication vulnerability discovered in OpenText™ iManager 3.2.6.0200.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00419 Published 2024-05-15 No fix listed CWE-287

TI-2024-03251 CVE-2024-3486 · GHSA-cmcg-f6r6-g4hh

XML External Entity injection vulnerability in iManager

MEDIUM 43

XML External Entity injection vulnerability found in OpenText™ iManager 3.2.6.0200.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00474 Published 2024-05-15 No fix listed CWE-611

TI-2024-03249 CVE-2024-3484 · GHSA-8jrr-vwjm-wj7q

Path Traversal vulnerability found in iManager

MEDIUM 43

Path Traversal found in OpenText™ iManager 3.2.6.0200.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00507 Published 2024-05-15 No fix listed CWE-22

TI-2024-03253 CVE-2024-3488 · GHSA-34wr-w2h3-hr5x

File Upload vulnerability in unauthenticated session found in iManager.

MEDIUM 42

File Upload vulnerability in unauthenticated session found in OpenText™ iManager 3.2.6.0200.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0037 Published 2024-05-15 No fix listed CWE-20

TI-2021-15799 CVE-2021-38116 · GHSA-78x5-mw8r-c5mr

Possible Command injection Vulnerability in OpenText iManager

MEDIUM 41

Possible Elevation of Privilege Vulnerability in iManager has been discovered in OpenText™ iManager.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00619 Published 2024-11-22 No fix listed CWE-77

TI-2024-03704 CVE-2024-3970 · GHSA-xppr-6c99-hp78

Server-Side Request Forgery vulnerability in iManager

LOW 33

Server Side Request Forgery vulnerability has been discovered in OpenText™ iManager 3.2.6.0200.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0051 Published 2024-05-15 No fix listed CWE-918

TI-2022-09703 CVE-2022-26324 · GHSA-58pv-8xf3-c5r4

Cross-site scripting in OpenText iManager

LOW 33

Possible XSS in iManager URL for access Component has been discovered in OpenText™ iManager 3.2.6.0000.

CVSS 3.1HIGH 7.6 Network Low privileges User interaction EPSS 0.00303 Published 2024-11-22 No fix listed CWE-79

TI-2021-15801 CVE-2021-38118 · GHSA-c3hf-4f7r-m69m

Possible Local Privilege Escalation Vulnerability in OpenText iManager

LOW 33

Possible improper input validation Vulnerability in iManager has been discovered in OpenText™ iManager 3.2.4.0000.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00209 Published 2024-11-22 No fix listed CWE-250

TI-2020-09529 CVE-2020-11859 · GHSA-3m9q-xm72-wq62

Potential Cross Site Scripting vulnerability in OpenText iManager

LOW 33

Improper Input Validation vulnerability in OpenText iManager allows Cross-Site Scripting (XSS).

CVSS 3.1HIGH 7.6 Network High privileges User interaction EPSS 0.00354 Published 2024-11-06 Fixed in < CWE-79

TI-2024-04119 CVE-2024-4429

Cross Site Request Forgery vulnerability in iManager

LOW 32

Cross-Site Request Forgery vulnerability has been discovered in OpenText™ iManager 3.2.6.0200.

CVSS 3.1HIGH 7.4 Network No auth User interaction EPSS 0.00181 Published 2024-05-28 No fix listed CWE-352

TI-2024-03250 CVE-2024-3485 · GHSA-jg34-vvwh-5qv9

Server-Side Request Forgery vulnerability in iManager

LOW 32

Server Side Request Forgery vulnerability has been discovered in OpenText™ iManager 3.2.6.0200.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00257 Published 2024-05-15 No fix listed CWE-918

TI-2018-12776 CVE-2018-17949 · GHSA-wc8v-x2c9-6fm7

Cross site scripting vulnerability in iManager prior to 3.1 SP2.

LOW 28

Cross site scripting vulnerability in iManager prior to 3.1 SP2.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.00647 Published 2018-12-12 No fix listed CWE-79

TI-2021-15816 CVE-2021-38134 · GHSA-335h-h5hx-g42j

Possible Reflected and Stored XSS in OpenText iManager

LOW 27

Possible XSS in iManager URL for access Component has been discovered in OpenText™ iManager 3.2.5.0000.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00308 Published 2024-11-22 No fix listed CWE-79

TI-2021-15802 CVE-2021-38119 · GHSA-2v57-2gwr-vg5h

Possible Reflected Cross-Site Scripting (XSS) Vulnerability in OpenText iManager

LOW 27

Possible Reflected Cross-Site Scripting (XSS) Vulnerability in iManager has been discovered in OpenText™ iManager 3.2.4.0000.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00327 Published 2024-11-22 No fix listed CWE-79

Open these records in search →