microfocus Vulnerability Advisory Catalog

Total 271 security vulnerabilities recorded for microfocus software and firmware.

← Back to All Vendors
Component: access_manager

Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in OpenText Access Manager allows Cross-Site Script...

📅 2026-06-24
CVSS 6.1 Dossier →
Component: access_manager

An unauthorized user can modify configuration through API calls that affects the OpenText Access Manager. This issue affects Access Manager before 5.1...

📅 2026-06-24
CVSS 7.5 Dossier →
Component: operations_agent

A security audit identified a privilege escalation vulnerability in Operations Agent(<=OA 12.29) on Windows. Under specific conditions Operations Agen...

📅 2026-03-31
CVSS 7.8 Dossier →
Component: imanager

Possible Command Injection in iManager GET parameter has been discovered in OpenText™ iManager 3.2.6.0000....

📅 2024-11-22
CVSS 8.8 Dossier →
Component: imanager

Possible XML External Entity Injection in iManager GET parameter has been discovered in OpenText™ iManager 3.2.6.0200....

📅 2024-11-22
CVSS 7.5 Dossier →
Component: imanager

Possible XSS in iManager URL for access Component has been discovered in OpenText™ iManager 3.2.6.0000....

📅 2024-11-22
CVSS 7.6 Dossier →
Component: imanager

Possible External Service Interaction attack in iManager has been discovered in OpenText™ iManager 3.2.6.0000....

📅 2024-11-22
CVSS 8.6 Dossier →
Component: imanager

Possible XSS in iManager URL for access Component has been discovered in OpenText™ iManager 3.2.5.0000....

📅 2024-11-22
CVSS 6.1 Dossier →
Component: imanager

Possible Reflected Cross-Site Scripting (XSS) Vulnerability in iManager has been discovered in OpenText™ iManager 3.2.4.0000....

📅 2024-11-22
CVSS 6.1 Dossier →
Component: imanager

Possible improper input validation Vulnerability in iManager has been discovered in OpenText™ iManager 3.2.4.0000....

📅 2024-11-22
CVSS 5.5 Dossier →
Component: imanager

Possible Command injection Vulnerability in iManager has been discovered in OpenText™ iManager 3.2.4.0000....

📅 2024-11-22
CVSS 8.8 Dossier →
Component: imanager

Possible Elevation of Privilege Vulnerability in iManager has been discovered in OpenText™ iManager. This impacts all versions before 3.2.5...

📅 2024-11-22
CVSS 8.8 Dossier →
CVE-2024-9841 MEDIUM
Component: arcsight_management_center

A Reflected Cross-Site Scripting (XSS) vulnerability has been identified in OpenText ArcSight Management Center and ArcSight Platform. The vulnerabili...

📅 2024-11-08
CVSS 6.1 Dossier →
Component: imanager

Improper Input Validation vulnerability in OpenText iManager allows Cross-Site Scripting (XSS). This issue affects iManager before 3.2.3...

📅 2024-11-06
CVSS 7.6 Dossier →
CVE-2024-5532 MEDIUM
Component: operations_agent

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in OpenText™ Operations Agent.  The XSS vul...

📅 2024-10-28
CVSS 4.8 Dossier →
Component: application_automation_tools

Improper Validation of Specified Quantity in Input vulnerability in OpenText OpenText Application Automation Tools allows Exploiting Incorrectly Confi...

📅 2024-10-16
CVSS 2.4 Dossier →
Component: application_automation_tools

Improper Restriction of XML External Entity Reference vulnerability in OpenText Application Automation Tools allows DTD Injection.This issue affects O...

📅 2024-10-16
CVSS 8.0 Dossier →
Component: application_automation_tools

Improper Validation of Specified Quantity in Input vulnerability in OpenText OpenText Application Automation Tools allows Exploiting Incorrectly Confi...

📅 2024-10-16
CVSS 2.4 Dossier →
Component: application_automation_tools

Improper Restriction of XML External Entity Reference vulnerability in OpenText Application Automation Tools allows DTD Injection.This issue affects O...

📅 2024-10-16
CVSS 8.0 Dossier →
Component: application_automation_tools

Improper Restriction of XML External Entity Reference vulnerability in OpenText Application Automation Tools allows DTD Injection.This issue affects O...

📅 2024-10-16
CVSS 8.0 Dossier →
CVE-2024-6360 CRITICAL
Component: vertica

Incorrect Permission Assignment for Critical Resource vulnerability in OpenText™ Vertica could allow Privilege Abuse and result in unauthorized access...

📅 2024-10-02
CVSS 9.8 Dossier →
Component: edirectory

Possible External Service Interaction attack in eDirectory has been discovered in OpenText™ eDirectory. This impact all version before 9.2.6.0000....

📅 2024-09-12
CVSS 7.4 Dossier →
Component: edirectory

Possible External Service Interaction attack in eDirectory has been discovered in OpenText™ eDirectory. This impact all version before 9.2.6.0000....

📅 2024-09-12
CVSS 5.3 Dossier →
Component: edirectory

Possible Cross-Site Scripting (XSS) Vulnerability in eDirectory has been discovered in OpenText™ eDirectory 9.2.5.0000....

📅 2024-09-12
CVSS 5.4 Dossier →
Page 1 of 12 (271 Total Records)