Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

129 records

Vendor: Micro Focus Clear all filters
TI-2023-15563 CVE-2023-32265 · GHSA-36c2-gx9g-q34j

Mitigations and availability of updates relating to security vulnerability in ESCWA component CVE-2023-32265.

Priority LOW 32

A potential security vulnerability has been identified in the Enterprise Server Common Web Administration (ESCWA) component used in Enterprise Server, Enterprise Test Server, Enterprise Developer, Visual COBOL, and COBOL…

CVSS 3.1HIGH 7.1 Network Low privileges No interaction EPSS 0.00454 Published 2023-07-20 No fix listed
TI-2023-15561 CVE-2023-32263 · GHSA-8hc6-w44m-wfxf

Dimensions CM Plugin for Jenkins 0.8.17 – 0.9.3

Priority LOW 25

A potential vulnerability has been identified in the Micro Focus Dimensions CM Plugin for Jenkins.

CVSS 3.1MEDIUM 5.7 Network Low privileges User interaction EPSS 0.00291 Published 2023-07-19 Fixed in 0.9.3.1
TI-2023-15560 CVE-2023-32262 · GHSA-px39-5h8c-j3c8

Dimensions CM Plugin for Jenkins 0.8.17 – 0.9.3

Priority LOW 30

A potential vulnerability has been identified in the Micro Focus Dimensions CM Plugin for Jenkins.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.0083 Published 2023-07-19 Partial fix · 0.9.3.1
TI-2023-15559 CVE-2023-32261 · GHSA-27pr-r7hm-c2rc

Dimensions CM Plugin for Jenkins 0.8.17 – 0.9.3

Priority LOW 30

A potential vulnerability has been identified in the Micro Focus Dimensions CM Plugin for Jenkins.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00625 Published 2023-07-19 Partial fix · 0.9.3.1 CWE-863
TI-2022-18268 CVE-2022-38758 · GHSA-vm5j-jm47-2g27

XSS vulnerabilities in iManager

Priority LOW 32

Cross-site Scripting (XSS) vulnerability in NetIQ iManager prior to version 3.2.6 allows attacker to execute malicious scripts on the user's browser.

CVSS 3.1HIGH 7.2 Adjacent network High privileges User interaction EPSS 0.00465 Published 2023-01-25 Fixed in 3.2.6 CWE-79
TI-2022-09708 CVE-2022-26329 · GHSA-ccfc-c3cw-8fcq

File existence disclosue vulnerability in IDM plugin

Priority LOW 25

File existence disclosure vulnerability in NetIQ Identity Manager plugin prior to version 4.8.5 allows attacker to determine whether a file exists on the filesystem.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00475 Published 2023-01-24 Fixed in 4.8.5 CWE-538
TI-2022-18267 CVE-2022-38757 · GHSA-m96j-4rc7-c9j2

CVE-2022-38757 ZENworks

Priority LOW 35

A vulnerability has been identified in Micro Focus ZENworks 2020 Update 3a and prior versions.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00901 Published 2022-12-23 No fix listed CWE-269
TI-2022-18266 CVE-2022-38756 · GHSA-664m-3r2m-mxpx

CVE-2022-38756 vulnerability in GW Web prior to 18.4.2

Priority MEDIUM 53

A vulnerability has been identified in Micro Focus GroupWise Web in versions prior to 18.4.2.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00885 Published 2022-12-16 Fixed in 18.4.2 CWE-532
TI-2022-09710 CVE-2022-26331 · GHSA-gqmg-mr55-425x

Cross-site scripting in Micro Focus ArcSight Logger

Priority LOW 28

Potential vulnerabilities have been identified in Micro Focus ArcSight Logger.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00458 Published 2022-08-31 Fixed in v7.2.2 CWE-79
TI-2021-05466 CVE-2021-22497 · GHSA-423x-7gwr-q727

Advanced Authentication Improper Session Management

Priority LOW 33

Advanced Authentication versions prior to 6.3 SP4 have a potential broken authentication due to improper session management issue.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00788 Published 2021-04-12 Fixed in 6.3 SP4 CWE-287
TI-2019-13657 CVE-2019-18943 · GHSA-j7h4-p7f6-r3rm

XML External Entity processing

Priority LOW 36

Micro Focus Solutions Business Manager versions prior to 11.7.1 are vulnerable to XML External Entity Processing (XXE) on certain operations.

CVSS 3.1HIGH 8.0 Adjacent network Low privileges No interaction EPSS 0.00613 Published 2021-02-26 Fixed in 11.7.1 CWE-611
Load more