microfocus Vulnerability Advisory Catalog

Total 271 security vulnerabilities recorded for microfocus software and firmware.

← Back to All Vendors
CVE-2024-3484 MEDIUM
Component: imanager

Path Traversal foundย in OpenTextโ„ข iManager 3.2.6.0200. This can lead to privilege escalation or file disclosure. ...

๐Ÿ“… 2024-05-15
CVSS 5.7 Dossier →
Component: imanager

Remote Code Execution has been discovered in OpenTextโ„ข iManager 3.2.6.0200.ย The vulnerability can trigger command injection and insecure deserializati...

๐Ÿ“… 2024-05-15
CVSS 7.8 Dossier →
Component: operations_agent

Local privilege escalation vulnerabilityย affects OpenText Operations Agent product versions 12.15 and 12.20-12.25 when installed on Non-Windows platfo...

๐Ÿ“… 2024-02-15
CVSS 8.8 Dossier →
Component: arcsight_management_center

A potential vulnerability has been identified in Micro Focus ArcSight Management Center. The vulnerability could be remotely exploited resulting in st...

๐Ÿ“… 2023-12-09
CVSS 5.9 Dossier →
Component: filr

Exposure of Proxy Administrator Credentials An authenticated administrator equivalent Filr user can access the credentials of proxy administrators. ...

๐Ÿ“… 2023-12-06
CVSS 7.2 Dossier →
Component: fortify_scancentral_dast

Incorrect Privilege Assignment vulnerability in opentext Fortify ScanCentral DAST. Theย vulnerability could be exploited to gain elevated privileges.Th...

๐Ÿ“… 2023-11-08
CVSS 8.2 Dossier →
Component: asset_management_x

Potential open redirect vulnerability in opentext Service Management Automation X (SMAX) versions 2020.05, 2020.08, 2020.11, 2021.02, 2021.05, 2021.0...

๐Ÿ“… 2023-10-30
CVSS 8.2 Dossier →
CVE-2023-4501 CRITICAL
Component: cobol_server

User authentication with username and password credentials is ineffective in OpenText (Micro Focus) Visual COBOL, COBOL Server, Enterprise Developer, ...

๐Ÿ“… 2023-09-12
CVSS 9.8 Dossier →
Component: arcsight_management_center

A potential vulnerability has been identified in OpenText / Micro Focus ArcSight Management Center. The vulnerability could be remotely exploited. ...

๐Ÿ“… 2023-08-11
CVSS 6.4 Dossier →
Component: cobol_server

A potential security vulnerability has been identified in the Enterprise Server Common Web Administration (ESCWA) component used in Enterprise Server...

๐Ÿ“… 2023-07-20
CVSS 7.1 Dossier →
Component: dimensions_cm

A potential vulnerability has been identified in the Micro Focus Dimensions CM Plugin for Jenkins. The vulnerability could be exploited to retrieve a...

๐Ÿ“… 2023-07-19
CVSS 2.6 Dossier →
Component: dimensions_cm

A potential vulnerability has been identified in the Micro Focus Dimensions CM Plugin for Jenkins. The vulnerability allows attackers with Item/Confi...

๐Ÿ“… 2023-07-19
CVSS 4.3 Dossier →
Component: dimensions_cm

A potential vulnerability has been identified in the Micro Focus Dimensions CM Plugin for Jenkins. The vulnerability allows attackers with Overall/Re...

๐Ÿ“… 2023-07-19
CVSS 4.2 Dossier →
CVE-2023-24470 CRITICAL
Component: arcsight_logger

Potential XML External Entity Injection in ArcSight Logger versions prior to 7.3.0....

๐Ÿ“… 2023-06-13
CVSS 9.1 Dossier →
Component: arcsight_logger

Potential Cross-Site Scripting in ArcSight Logger versions prior to 7.3.0...

๐Ÿ“… 2023-06-13
CVSS 6.1 Dossier →
CVE-2023-24468 CRITICAL
Component: netiq_advanced_authentication

Broken access control in Advanced Authentication versions prior to 6.4.1.1 and 6.3.7.2...

๐Ÿ“… 2023-03-15
CVSS 9.8 Dossier →
Component: zenworks

A vulnerability has been identified in Micro Focus ZENworks 2020 Update 3a and prior versions. This vulnerability allows administrators with rights to...

๐Ÿ“… 2022-12-23
CVSS 7.2 Dossier →
Component: groupwise

A vulnerability has been identified in Micro Focus GroupWise Web in versions prior to 18.4.2. The GW Web component makes a request to the Post Office ...

๐Ÿ“… 2022-12-16
CVSS 4.3 Dossier →
Component: operations_bridge

A potential vulnerability has been identified in Micro Focus Operations Bridge - Containerized. The vulnerability could be exploited by a malicious au...

๐Ÿ“… 2022-12-08
CVSS 8.0 Dossier →
Component: netiq_advanced_authentication

This update resolves a multi-factor authentication bypass attack...

๐Ÿ“… 2022-11-28
CVSS 6.3 Dossier →
Component: filr

A vulnerability has been identified in Micro Focus Filr in versions prior to 4.3.1.1. The vulnerability could be exploited to allow a remote unauthent...

๐Ÿ“… 2022-11-21
CVSS 5.3 Dossier →
Component: arcsight_logger

Potential vulnerabilities have been identified in Micro Focus ArcSight Logger. The vulnerabilities could be remotely exploited resulting in Informatio...

๐Ÿ“… 2022-08-31
CVSS 6.1 Dossier →
Component: arcsight_logger

Potential vulnerabilities have been identified in Micro Focus ArcSight Logger. The vulnerabilities could be remotely exploited resulting in Informatio...

๐Ÿ“… 2022-08-31
CVSS 6.5 Dossier →
Component: access_manager

A bug exist in the input parameter of Access Manager that allows supply of invalid character to trigger cross-site scripting vulnerability. This affec...

๐Ÿ“… 2022-05-12
CVSS 6.1 Dossier →
Page 3 of 12 (271 Total Records)