Micro Focus International

Records274All Threatist records

Exploited (KEV)2In CISA KEV

CVSS critical63CVSS 9.0–10.0

CVSS high95CVSS 7.0–8.9

Exploited now

Micro Focus International records in CISA KEV

TI-2021-05471 Micro Focus Operation Bridge Report (OBR) Remote Code Execution Vulnerability CRITICAL 100KEV 2021-11-03 TI-2021-05475 Micro Focus Access Manager Information Leakage Vulnerability CRITICAL 90KEV 2021-11-03

Components

Products in the NVD configurations · select one to filter the records

Imanager 22 records MEDIUM Access Manager 18 records CRITICAL Solutions Business Manager 17 records MEDIUM Edirectory 16 records HIGH Service Manager 16 records MEDIUM Enterprise Developer 12 records MEDIUM Enterprise Server 12 records MEDIUM Netiq Advanced Authentication 11 records MEDIUM

Records

16 records in Service Manager · all components

TI-2019-08715 CVE-2019-11646 · GHSA-9grj-rhxp-4jp2

Remote unauthorized command execution and unauthorized disclosure of information in Micro…

MEDIUM 43

Remote unauthorized command execution and unauthorized disclosure of information in Micro Focus Service Manager, versions 9.30, 9.31, 9.32, 9.33, 9.34, 9.35, 9.40, 9.41, 9.50, 9.51, 9.52, 9.60, 9.61.

CVSS 3.0HIGH 8.8 Network Low privileges No interaction EPSS 0.02468 Published 2019-06-03 No fix listed

TI-2019-08734 CVE-2019-11666 · GHSA-vrhg-jgfj-7rxw

Deserialization of untrusted data in Micro Focus Service Manager

MEDIUM 40

Insecure deserialization of untrusted data in Micro Focus Service Manager product versions 9.30, 9.31, 9.32, 9.33, 9.34, 9.35, 9.40, 9.41, 9.50, 9.51, 9.52, 9.60, 9.61, 9.62.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01177 Published 2019-09-17 No fix listed CWE-502

TI-2019-08729 CVE-2019-11661 · GHSA-gm2g-pw66-2fvw

Allow changes to some table by non-SysAdmin in Micro Focus Service Manager product…

LOW 38

Allow changes to some table by non-SysAdmin in Micro Focus Service Manager product versions 9.30, 9.31, 9.32, 9.33, 9.34, 9.35, 9.40, 9.41, 9.50, 9.51, 9.52, 9.60, 9.61, 9.62.

CVSS 3.1HIGH 8.3 Network Low privileges No interaction EPSS 0.0099 Published 2019-09-18 No fix listed

TI-2019-08736 CVE-2019-11668 · GHSA-977g-2h5m-pcj2

HTTP cookie in Micro Focus Service manager, Versions 9.30, 9.31, 9.32, 9.33, 9.34, 9.35…

LOW 35

HTTP cookie in Micro Focus Service manager, Versions 9.30, 9.31, 9.32, 9.33, 9.34, 9.35, 9.40, 9.41, 9.50, 9.51, 9.52, 9.60, 9.61, 9.62.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01071 Published 2019-09-10 No fix listed

TI-2019-08735 CVE-2019-11667 · GHSA-57x8-g5w9-xqv4

Unauthorized access to contact information in Micro Focus Service Manager, versions 9.41…

LOW 35

Unauthorized access to contact information in Micro Focus Service Manager, versions 9.41, 9.50, 9.51, 9.52, 9.60, 9.61, 9.62.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01071 Published 2019-09-17 No fix listed

TI-2019-08733 CVE-2019-11665 · GHSA-57r7-qc46-rjx5

Data exposure in Micro Focus Service Manager product versions 9.30, 9.31, 9.32, 9.33…

LOW 35

Data exposure in Micro Focus Service Manager product versions 9.30, 9.31, 9.32, 9.33, 9.34, 9.35, 9.40, 9.41, 9.50, 9.51, 9.52, 9.60, 9.61, 9.62.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01071 Published 2019-09-17 No fix listed

TI-2019-08737 CVE-2019-11669 · GHSA-r2xr-w7m8-7x36

Modifiable read only check box In Micro Focus Service Manager, versions 9.60p1, 9.61…

LOW 34

Modifiable read only check box In Micro Focus Service Manager, versions 9.60p1, 9.61, 9.62.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00872 Published 2019-09-10 No fix listed

TI-2018-13150 CVE-2018-18591 · GHSA-w42w-m8w7-9jc7

MFSBGN03823 rev.1 - Micro Focus Service Manager, unauthorized disclosure of data

LOW 32

A potential unauthorized disclosure of data vulnerability has been identified in Micro Focus Service Manager versions: 9.30, 9.31, 9.32, 9.33, 9.34, 9.35, 9.40, 9.41, 9.50, 9.51.

CVSS 3.0MEDIUM 6.8 Network Low privileges User interaction EPSS 0.01001 Published 2018-11-13 No fix listed CWE-200

TI-2020-09515 CVE-2020-11845 · GHSA-mwc4-hr5w-h77r

Cross-site scripting in Service Manager.

LOW 29

Cross Site Scripting vulnerability in Micro Focus Service Manager product.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00765 Published 2020-05-19 No fix listed CWE-79

TI-2019-08732 CVE-2019-11664 · GHSA-7cgh-6cwq-7r4m

Insufficiently protected credentials in Micro Focus Service Manager

LOW 29

Clear text password in browser in Micro Focus Service Manager product versions 9.30, 9.31, 9.32, 9.33, 9.34, 9.35, 9.40, 9.41, 9.50, 9.51, 9.52, 9.60, 9.61, 9.62.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00525 Published 2019-09-18 No fix listed CWE-311

TI-2019-08731 CVE-2019-11663 · GHSA-2v62-48mq-rgvp

Insufficiently protected credentials in Micro Focus Service Manager

LOW 29

Clear text credentials are used to access managers app in Tomcat in Micro Focus Service Manager product versions 9.30, 9.31, 9.32, 9.33, 9.34, 9.35, 9.40, 9.41, 9.50, 9.51, 9.52, 9.60, 9.61, 9.62.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00483 Published 2019-09-18 No fix listed CWE-311

TI-2018-04776 CVE-2018-6494 · GHSA-v2g2-jx9f-6pcv

MFSBGN03807 rev.1 - HP Service Manager Software, Multiple Vulnerabilities

LOW 27

Remote SQL Injection against the HP Service Manager Software Web Tier, version 9.30, 9.31, 9.32, 9.33, 9.34, 9.35, 9.40, 9.41, 9.50, 9.51, may lead to unauthorized disclosure of data.

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.01156 Published 2018-05-22 No fix listed CWE-89

TI-2020-07615 CVE-2020-9519 · GHSA-9w97-fqxc-vhf2

HTTP methods reveled in Web services vulnerability in Micro Focus Service manager…

LOW 26

HTTP methods reveled in Web services vulnerability in Micro Focus Service manager (server), affecting versions 9.40, 9.41, 9.50, 9.51, 9.52, 9.60, 9.61, 9.62, 9.63.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00862 Published 2020-03-16 No fix listed

TI-2020-07614 CVE-2020-9518 · GHSA-7gx3-58wr-vg5f

Login filter can access configuration files vulnerability in Micro Focus Service Manager…

LOW 26

Login filter can access configuration files vulnerability in Micro Focus Service Manager (Web Tier), affecting versions 9.50, 9.51, 9.52, 9.60, 9.61, 9.62.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00862 Published 2020-03-16 No fix listed

TI-2020-07613 CVE-2020-9517 · GHSA-r8hw-2vg3-pcpx

Clickjacking in Micro Focus International Service Manager

LOW 25

There is an improper restriction of rendered UI layers or frames vulnerability in Micro Focus Service Manager Release Control versions 9.50 and 9.60.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00482 Published 2020-03-09 No fix listed CWE-1021

TI-2019-08730 CVE-2019-11662 · GHSA-vp7h-9vpx-8f6p

Information disclosure through error messages in Micro Focus Service Manager

LOW 21

Class and method names in error message in Micro Focus Service Manager product versions 9.30, 9.31, 9.32, 9.33, 9.34, 9.35, 9.40, 9.41, 9.50, 9.51, 9.52, 9.60, 9.61, 9.62.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00681 Published 2019-09-18 No fix listed CWE-209

Open these records in search →

Critical	63
High	95
Medium	111
Low	5
No CVSS	0