microfocus Vulnerability Advisory Catalog

Total 271 security vulnerabilities recorded for microfocus software and firmware.

← Back to All Vendors
Component: edirectory

Possible Insertion of Sensitive Information into Log File Vulnerability in eDirectory has been discovered in OpenText™ eDirectory 9.2.4.0000....

📅 2024-09-12
CVSS 6.5 Dossier →
Component: edirectory

Possible NLDAP Denial of Service attack Vulnerability in eDirectory has been discovered in OpenText™ eDirectory before 9.2.4.0000....

📅 2024-09-12
CVSS 7.6 Dossier →
Component: edirectory

Possible Improper Neutralization of Input During Web Page Generation Vulnerability in eDirectory has been discovered in OpenText™ eDirectory 9.2.3.0...

📅 2024-09-12
CVSS 5.4 Dossier →
CVE-2024-4556 MEDIUM
Component: netiq_access_manager

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in OpenText NetIQ Access Manager allows access the sensit...

📅 2024-08-28
CVSS 5.7 Dossier →
Component: netiq_access_manager

Improper Privilege Management vulnerability in OpenText NetIQ Access Manager allows user account impersonation in specific scenario. This issue affect...

📅 2024-08-28
CVSS 7.7 Dossier →
Component: netiq_access_manager

Improper Input Validation vulnerability in OpenText NetIQ Access Manager leads to Cross-Site Scripting (XSS) attack. This issue affects Access Manager...

📅 2024-08-28
CVSS 7.3 Dossier →
Component: netiq_advanced_authentication

A Cross-Site Scripting vulnerable identified in NetIQ Advance Authentication that impacts the server functionality and disclose sensitive information....

📅 2024-08-28
CVSS 6.2 Dossier →
Component: netiq_advanced_authentication

Insufficient or weak TLS protocol version identified in Advance authentication client server communication when specific service is accessed between d...

📅 2024-08-28
CVSS 8.3 Dossier →
Component: netiq_advanced_authentication

A vulnerability identified in Advance Authentication that allows bash command Injection in administrative controlled functionality of backup due to im...

📅 2024-08-28
CVSS 5.1 Dossier →
Component: netiq_advanced_authentication

A vulnerability identified in NetIQ Advance Authentication that doesn't enforce account lockout when brute force attack is performed on API based logi...

📅 2024-08-28
CVSS 8.2 Dossier →
Component: netiq_advanced_authentication

A vulnerability identified in NetIQ Advance Authentication that leaks sensitive server information. This issue affects NetIQ Advance Authentication ve...

📅 2024-08-28
CVSS 6.3 Dossier →
Component: netiq_advanced_authentication

A vulnerability identified in storing and reusing information in Advance Authentication. This issue can lead to leakage of sensitive data to unauthori...

📅 2024-08-28
CVSS 8.1 Dossier →
Component: netiq_privileged_access_manager

SSH authenticated user when access the PAM server can execute an OS command to gain the full system access using bash. This issue affects Privileged A...

📅 2024-08-21
CVSS 8.2 Dossier →
Component: netiq_privileged_access_manager

A vulnerability found in OpenText Privileged Access Manager that issues a token. on successful issuance of the token, a cookie gets set that allows un...

📅 2024-08-21
CVSS 8.7 Dossier →
Component: netiq_self_service_password_reset

Improper Input Validation vulnerability in OpenText Self Service Password Reset allows Cross-Site Scripting (XSS). This issue affects Self Service Pas...

📅 2024-08-21
CVSS 7.3 Dossier →
CVE-2024-4429 MEDIUM
Component: imanager

Cross-Site Request Forgery vulnerability has been discovered in OpenText™ iManager 3.2.6.0200. This could lead to sensitive information disclosure....

📅 2024-05-28
CVSS 5.4 Dossier →
Component: imanager

XML External Entity injection vulnerability found in OpenText™ iManager 3.2.6.0200. This could lead to remote code execution by parsing untrusted XML ...

📅 2024-05-28
CVSS 7.8 Dossier →
CVE-2024-3970 MEDIUM
Component: imanager

Server Side Request Forgery vulnerability has been discovered in OpenText™ iManager 3.2.6.0200. This could lead to senstive information disclosure by ...

📅 2024-05-15
CVSS 5.3 Dossier →
Component: imanager

Remote Code Execution has been discovered in OpenText™ iManager 3.2.6.0200. The vulnerability can trigger remote code execution using custom file uplo...

📅 2024-05-15
CVSS 7.8 Dossier →
Component: imanager

Remote Code Execution has been discovered in OpenText™ iManager 3.2.6.0200. The vulnerability can trigger remote code execution unisng unsafe java obj...

📅 2024-05-15
CVSS 7.6 Dossier →
CVE-2024-3488 MEDIUM
Component: imanager

File Upload vulnerability in unauthenticated session found in OpenText™ iManager 3.2.6.0200. The vulnerability could allow ant attacker to upload a fi...

📅 2024-05-15
CVSS 5.6 Dossier →
Component: imanager

Broken Authentication vulnerability discovered in OpenText™ iManager 3.2.6.0200. This vulnerability allows an attacker to manipulate certain parameter...

📅 2024-05-15
CVSS 3.5 Dossier →
Component: imanager

XML External Entity injection vulnerability found in OpenText™ iManager 3.2.6.0200. This could lead to information disclosure and remote code executio...

📅 2024-05-15
CVSS 7.8 Dossier →
CVE-2024-3485 MEDIUM
Component: imanager

Server Side Request Forgery vulnerability has been discovered in OpenText™ iManager 3.2.6.0200. This could lead to senstive information disclosure....

📅 2024-05-15
CVSS 5.3 Dossier →
Page 2 of 12 (271 Total Records)