Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

12 records

Vendor: Micro Focus International Component: Enterprise Developer Clear all filters
TI-2023-04154 CVE-2023-4501 · GHSA-gxh2-p3fj-8cc8

Authentication bypass in OpenText (Micro Focus) Enterprise Server

Priority MEDIUM 50

User authentication with username and password credentials is ineffective in OpenText (Micro Focus) Visual COBOL, COBOL Server, Enterprise Developer, and Enterprise Server (including product variants such as Enterprise T…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00758 Published 2023-09-12 Fixed in 7.0.21, 8.0.10 +1 CWE-253
TI-2023-15563 CVE-2023-32265 · GHSA-36c2-gx9g-q34j

Mitigations and availability of updates relating to security vulnerability in ESCWA component CVE-2023-32265.

Priority LOW 32

A potential security vulnerability has been identified in the Enterprise Server Common Web Administration (ESCWA) component used in Enterprise Server, Enterprise Test Server, Enterprise Developer, Visual COBOL, and COBOL…

CVSS 3.1HIGH 7.1 Network Low privileges No interaction EPSS 0.00454 Published 2023-07-20 No fix listed
TI-2020-07620 CVE-2020-9524 · GHSA-4v4v-6cx5-x258

Cross-site scripting in Enterprise Server and Enterprise developer.

Priority LOW 25

Cross Site scripting vulnerability on Micro Focus Enterprise Server and Enterprise developer, affecting all versions prior to version 5.0 Patch Update 8.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.0051 Published 2020-05-18 No fix listed CWE-79
TI-2020-07619 CVE-2020-9523 · GHSA-mf4c-7jx4-wgmm

Insufficiently protected credentials in Enterprise developer and server.

Priority MEDIUM 40

Insufficiently protected credentials vulnerability on Micro Focus enterprise developer and enterprise server, affecting all version prior to 4.0 Patch Update 16, and version 5.0 Patch Update 6.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00861 Published 2020-04-17 No fix listed CWE-522
TI-2017-05076 CVE-2017-7424 · GHSA-jrgm-9c67-7gh6

Path traversal in Micro Focus Enterprise Developer, Micro Focus Enterprise Server

Priority LOW 32

A Path Traversal (CWE-22) vulnerability in esfadmingui in Micro Focus Enterprise Developer and Enterprise Server 2.3, 2.3 Update 1 before Hotfix 8, and 2.3 Update 2 before Hotfix 9 allows remote authenticated users to do…

CVSS 3.0MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01785 Published 2017-08-21 No fix listed CWE-22
TI-2017-05074 CVE-2017-7422 · GHSA-4jfr-8hvq-mgfc

Cross-site scripting in Micro Focus Enterprise Developer, Micro Focus Enterprise Server

Priority LOW 27

Reflected and stored Cross-Site Scripting (XSS, CWE-79) vulnerabilities in esfadmingui in Micro Focus Enterprise Developer and Enterprise Server 2.3, 2.3 Update 1 before Hotfix 8, and 2.3 Update 2 before Hotfix 9 allow r…

CVSS 3.0MEDIUM 5.4 Network Low privileges User interaction EPSS 0.01063 Published 2017-08-21 No fix listed CWE-79
TI-2017-05072 CVE-2017-7420 · GHSA-mh7j-5vww-cqrw

Improper authentication in Micro Focus Enterprise Developer, Micro Focus Enterprise Server

Priority MEDIUM 47

An Authentication Bypass (CWE-287) vulnerability in ESMAC (aka Enterprise Server Monitor and Control) in Micro Focus Enterprise Developer and Enterprise Server 2.3 and earlier, 2.3 Update 1 before Hotfix 8, and 2.3 Updat…

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.02444 Published 2017-08-21 No fix listed CWE-287