TI-2020-09515 CVE-2020-11845 · GHSA-mwc4-hr5w-h77r
Cross-site scripting in Service Manager.
Priority LOW 29
Cross Site Scripting vulnerability in Micro Focus Service Manager product.
Vulnerabilities
16 records
TI-2020-07614 CVE-2020-9518 · GHSA-7gx3-58wr-vg5f
Login filter can access configuration files vulnerability in Micro Focus Service Manager…
Priority LOW 26
Login filter can access configuration files vulnerability in Micro Focus Service Manager (Web Tier), affecting versions 9.50, 9.51, 9.52, 9.60, 9.61, 9.62.
TI-2020-07615 CVE-2020-9519 · GHSA-9w97-fqxc-vhf2
HTTP methods reveled in Web services vulnerability in Micro Focus Service manager…
Priority LOW 26
HTTP methods reveled in Web services vulnerability in Micro Focus Service manager (server), affecting versions 9.40, 9.41, 9.50, 9.51, 9.52, 9.60, 9.61, 9.62, 9.63.
TI-2020-07613 CVE-2020-9517 · GHSA-r8hw-2vg3-pcpx
Clickjacking in Micro Focus International Service Manager
Priority LOW 25
There is an improper restriction of rendered UI layers or frames vulnerability in Micro Focus Service Manager Release Control versions 9.50 and 9.60.
TI-2019-08730 CVE-2019-11662 · GHSA-vp7h-9vpx-8f6p
Information disclosure through error messages in Micro Focus Service Manager
Priority LOW 21
Class and method names in error message in Micro Focus Service Manager product versions 9.30, 9.31, 9.32, 9.33, 9.34, 9.35, 9.40, 9.41, 9.50, 9.51, 9.52, 9.60, 9.61, 9.62.
TI-2019-08729 CVE-2019-11661 · GHSA-gm2g-pw66-2fvw
Allow changes to some table by non-SysAdmin in Micro Focus Service Manager product…
Priority LOW 38
Allow changes to some table by non-SysAdmin in Micro Focus Service Manager product versions 9.30, 9.31, 9.32, 9.33, 9.34, 9.35, 9.40, 9.41, 9.50, 9.51, 9.52, 9.60, 9.61, 9.62.
TI-2019-08732 CVE-2019-11664 · GHSA-7cgh-6cwq-7r4m
Insufficiently protected credentials in Micro Focus Service Manager
Priority LOW 29
Clear text password in browser in Micro Focus Service Manager product versions 9.30, 9.31, 9.32, 9.33, 9.34, 9.35, 9.40, 9.41, 9.50, 9.51, 9.52, 9.60, 9.61, 9.62.
TI-2019-08731 CVE-2019-11663 · GHSA-2v62-48mq-rgvp
Insufficiently protected credentials in Micro Focus Service Manager
Priority LOW 29
Clear text credentials are used to access managers app in Tomcat in Micro Focus Service Manager product versions 9.30, 9.31, 9.32, 9.33, 9.34, 9.35, 9.40, 9.41, 9.50, 9.51, 9.52, 9.60, 9.61, 9.62.
TI-2019-08733 CVE-2019-11665 · GHSA-57r7-qc46-rjx5
Data exposure in Micro Focus Service Manager product versions 9.30, 9.31, 9.32, 9.33…
Priority LOW 35
Data exposure in Micro Focus Service Manager product versions 9.30, 9.31, 9.32, 9.33, 9.34, 9.35, 9.40, 9.41, 9.50, 9.51, 9.52, 9.60, 9.61, 9.62.
TI-2019-08734 CVE-2019-11666 · GHSA-vrhg-jgfj-7rxw
Deserialization of untrusted data in Micro Focus Service Manager
Priority MEDIUM 40
Insecure deserialization of untrusted data in Micro Focus Service Manager product versions 9.30, 9.31, 9.32, 9.33, 9.34, 9.35, 9.40, 9.41, 9.50, 9.51, 9.52, 9.60, 9.61, 9.62.
TI-2019-08735 CVE-2019-11667 · GHSA-57x8-g5w9-xqv4
Unauthorized access to contact information in Micro Focus Service Manager, versions 9.41…
Priority LOW 35
Unauthorized access to contact information in Micro Focus Service Manager, versions 9.41, 9.50, 9.51, 9.52, 9.60, 9.61, 9.62.
TI-2019-08737 CVE-2019-11669 · GHSA-r2xr-w7m8-7x36
Modifiable read only check box In Micro Focus Service Manager, versions 9.60p1, 9.61…
Priority LOW 34
Modifiable read only check box In Micro Focus Service Manager, versions 9.60p1, 9.61, 9.62.
TI-2019-08736 CVE-2019-11668 · GHSA-977g-2h5m-pcj2
HTTP cookie in Micro Focus Service manager, Versions 9.30, 9.31, 9.32, 9.33, 9.34, 9.35…
Priority LOW 35
HTTP cookie in Micro Focus Service manager, Versions 9.30, 9.31, 9.32, 9.33, 9.34, 9.35, 9.40, 9.41, 9.50, 9.51, 9.52, 9.60, 9.61, 9.62.
TI-2019-08715 CVE-2019-11646 · GHSA-9grj-rhxp-4jp2
Remote unauthorized command execution and unauthorized disclosure of information in Micro…
Priority MEDIUM 43
Remote unauthorized command execution and unauthorized disclosure of information in Micro Focus Service Manager, versions 9.30, 9.31, 9.32, 9.33, 9.34, 9.35, 9.40, 9.41, 9.50, 9.51, 9.52, 9.60, 9.61.
TI-2018-13150 CVE-2018-18591 · GHSA-w42w-m8w7-9jc7
MFSBGN03823 rev.1 - Micro Focus Service Manager, unauthorized disclosure of data
Priority LOW 32
A potential unauthorized disclosure of data vulnerability has been identified in Micro Focus Service Manager versions: 9.30, 9.31, 9.32, 9.33, 9.34, 9.35, 9.40, 9.41, 9.50, 9.51.
TI-2018-04776 CVE-2018-6494 · GHSA-v2g2-jx9f-6pcv
MFSBGN03807 rev.1 - HP Service Manager Software, Multiple Vulnerabilities
Priority LOW 27
Remote SQL Injection against the HP Service Manager Software Web Tier, version 9.30, 9.31, 9.32, 9.33, 9.34, 9.35, 9.40, 9.41, 9.50, 9.51, may lead to unauthorized disclosure of data.