microfocus Vulnerability Advisory Catalog

Total 271 security vulnerabilities recorded for microfocus software and firmware.

← Back to All Vendors
Component: sentinel

A vulnerability was discovered in NetIQ Sentinel Server 8.0 before 8.0.1 that may allow remote denial of service....

📅 2017-03-30
CVSS 7.5 Dossier →
CVE-2017-5184 MEDIUM
Component: sentinel

A vulnerability was discovered in NetIQ Sentinel Server 8.0 before 8.0.1 that may allow leakage of information (account enumeration)....

📅 2017-03-30
CVSS 5.3 Dossier →
CVE-2016-5765 MEDIUM
Component: host_access_management_and_security_server

Administrative Server in Micro Focus Host Access Management and Security Server (MSS) and Reflection for the Web (RWeb) and Reflection Security Gatewa...

📅 2016-11-29
CVSS 6.5 Dossier →
CVE-2016-9176 CRITICAL
Component: rumba

Stack buffer overflow in the send.exe and receive.exe components of Micro Focus Rumba 9.4 and earlier could be used by local attackers or attackers ab...

📅 2016-11-04
CVSS 9.8 Dossier →
Component: rumba_ftp

Micro Focus Rumba FTP 4.X client buffer overflow makes it possible to corrupt the stack and allow arbitrary code execution. Fixed in: Rumba FTP 4.5 (H...

📅 2016-10-27
CVSS 8.8 Dossier →
CVE-2016-5228 CRITICAL
Component: rumba

Stack-based buffer overflow in the PlayMacro function in ObjectXMacro.ObjectXMacro in WdMacCtl.ocx in Micro Focus Rumba 9.x before 9.3 HF 11997 and 9....

📅 2016-07-03
CVSS 9.8 Dossier →
CVE-2016-1606 CRITICAL
Component: rumba

Multiple stack-based buffer overflows in COM objects in Micro Focus Rumba 9.4.x before 9.4 HF 13960 allow remote attackers to execute arbitrary code v...

📅 2016-07-03
CVSS 9.8 Dossier →
CVE-2016-1599 MEDIUM
Component: self_service_password_reset

Cross-site scripting (XSS) vulnerability in NetIQ Self Service Password Reset (SSPR) 2.x and 3.x before 3.3.1 HF2 allows remote attackers to inject ar...

📅 2016-03-24
CVSS 6.1 Dossier →
Component: arcsight_enterprise_security_manager

HPE ArcSight ESM 5.x before 5.6, 6.0, 6.5.x before 6.5C SP1 Patch 2, and 6.8c before P1, and ArcSight ESM Express before 6.9.1, allows remote authenti...

📅 2016-03-16
CVSS 8.0 Dossier →
Component: arcsight_enterprise_security_manager

HPE ArcSight ESM 5.x before 5.6, 6.0, 6.5.x before 6.5C SP1 Patch 2, and 6.8c before P1, and ArcSight ESM Express before 6.9.1, allows local users to ...

📅 2016-03-16
CVSS 7.8 Dossier →
CVE-2015-6946 UNKNOWN
Component: accurev

Multiple stack-based buffer overflows in the Reprise License Manager service in Borland AccuRev allow remote attackers to execute arbitrary code via t...

📅 2015-09-15
CVSS 9.3 Dossier →
CVE-2015-0795 UNKNOWN
Component: security_solutions_for_iseries

Multiple stack-based buffer overflows in the SafeShellExecute method in the NetIQExecObject.NetIQExec.1 ActiveX control in NetIQExec.dll in NetIQ Secu...

📅 2015-07-18
CVSS 6.8 Dossier →
CVE-2014-7885 UNKNOWN
Component: arcsight_enterprise_security_manager

Multiple unspecified vulnerabilities in HP ArcSight Enterprise Security Manager (ESM) before 6.8c have unknown impact and remote attack vectors....

📅 2015-03-14
CVSS 10.0 Dossier →
CVE-2014-9412 UNKNOWN
Component: access_manager

Multiple cross-site scripting (XSS) vulnerabilities in NetIQ Access Manager (NAM) 4.x before 4.1 allow remote attackers to inject arbitrary web script...

📅 2014-12-23
CVSS 4.3 Dossier →
CVE-2014-5217 UNKNOWN
Component: access_manager

Cross-site request forgery (CSRF) vulnerability in nps/servlet/webacc in the Administration Console server in NetIQ Access Manager (NAM) 4.x before 4....

📅 2014-12-23
CVSS 6.8 Dossier →
CVE-2014-5216 UNKNOWN
Component: access_manager

Multiple cross-site scripting (XSS) vulnerabilities in NetIQ Access Manager (NAM) 4.x before 4.0.1 HF3 allow remote attackers to inject arbitrary web ...

📅 2014-12-23
CVSS 4.3 Dossier →
CVE-2014-5215 UNKNOWN
Component: access_manager

NetIQ Access Manager (NAM) 4.x before 4.0.1 HF3 allows remote authenticated administrators to discover service-account passwords via a request to (1) ...

📅 2014-12-23
CVSS 4.0 Dossier →
CVE-2014-5214 UNKNOWN
Component: access_manager

nps/servlet/webacc in iManager in the Administration Console server in NetIQ Access Manager (NAM) 4.x before 4.0.1 HF3 allows remote authenticated nov...

📅 2014-12-23
CVSS 4.0 Dossier →
CVE-2014-0602 UNKNOWN
Component: security_manager

Directory traversal vulnerability in the DumpToFile method in the NQMcsVarSet ActiveX control in NetIQ Security Manager through 6.5.4 allows remote at...

📅 2014-07-07
CVSS 7.5 Dossier →
CVE-2014-3460 UNKNOWN
Component: sentinel

Directory traversal vulnerability in the DumpToFile method in the NQMcsVarSet ActiveX control in Agent Manager in NetIQ Sentinel allows remote attacke...

📅 2014-05-20
CVSS 6.8 Dossier →
CVE-2013-4815 UNKNOWN
Component: arcsight_enterprise_security_manager

Cross-site scripting (XSS) vulnerability in the web interface in HP ArcSight Enterprise Security Manager (ESM) before 5.5 allows remote attackers to i...

📅 2013-09-20
CVSS 4.3 Dossier →
CVE-2012-0432 UNKNOWN
Component: edirectory

Stack-based buffer overflow in the Novell NCP implementation in NetIQ eDirectory 8.8.7.x before 8.8.7.2 allows remote attackers to have an unspecified...

📅 2012-12-25
CVSS 10.0 Dossier →
CVE-2012-0430 UNKNOWN
Component: edirectory

Unspecified vulnerability in NetIQ eDirectory 8.8.6.x before 8.8.6.7 and 8.8.7.x before 8.8.7.2 on Windows allows remote attackers to obtain an admini...

📅 2012-12-25
CVSS 6.4 Dossier →
CVE-2012-0429 UNKNOWN
Component: edirectory

dhost in NetIQ eDirectory 8.8.6.x before 8.8.6.7 and 8.8.7.x before 8.8.7.2 on Windows allows remote authenticated users to cause a denial of service ...

📅 2012-12-25
CVSS 4.0 Dossier →
Page 11 of 12 (271 Total Records)