microfocus Vulnerability Advisory Catalog

Total 271 security vulnerabilities recorded for microfocus software and firmware.

← Back to All Vendors
Component: netiq_access_manager

Potential open redirection vulnerability when URL is crafted in specific format in NetIQ Access Manager prior to 5.0.2...

📅 2022-05-02
CVSS 4.0 Dossier →
Component: netiq_access_manager

Reflected Cross Site Scripting (XSS) vulnerability in NetIQ Access Manager prior to 5.0.2...

📅 2022-05-02
CVSS 2.9 Dossier →
CVE-2021-38125 CRITICAL
Component: operations_bridge

Unauthenticated remote code execution in Micro Focus Operations Bridge containerized, affecting versions 2021.05, 2021.08, and newer versions of Micro...

📅 2022-04-11
CVSS 9.8 Dossier →
Component: voltage_securemail

A potential Information leakage vulnerability has been identified in versions of Micro Focus Voltage SecureMail Mail Relay prior to 7.3.0.1. The vulne...

📅 2022-02-04
CVSS 6.5 Dossier →
Component: operations_agent

Escalation of privileges vulnerability in Micro Focus in Micro Focus Operations Agent, affecting versions 12.x up to and including 12.21. The vulnerab...

📅 2022-01-25
CVSS 3.3 Dossier →
Component: arcsight_enterprise_security_manager

Potential vulnerabilities have been identified in Micro Focus ArcSight Enterprise Security Manager, affecting versions 7.4.x and 7.5.x. The vulnerabil...

📅 2022-01-14
CVSS 6.1 Dossier →
Component: arcsight_enterprise_security_manager

Potential vulnerabilities have been identified in Micro Focus ArcSight Enterprise Security Manager, affecting versions 7.4.x and 7.5.x. The vulnerabil...

📅 2022-01-14
CVSS 6.1 Dossier →
CVE-2021-38124 CRITICAL
Component: arcsight_enterprise_security_manager

Remote Code Execution vulnerability in Micro Focus ArcSight Enterprise Security Manager (ESM) product, affecting versions 7.0.2 through 7.5. The vulne...

📅 2021-09-28
CVSS 9.8 Dossier →
Component: netiq_directory_and_resource_administrator

Unauthorized information security disclosure vulnerability on Micro Focus Directory and Resource Administrator (DRA) product, affecting all DRA versio...

📅 2021-09-28
CVSS 4.9 Dossier →
Component: access_manager

Reflected Cross Site Scripting (XSS) vulnerability in NetIQ Access Manager prior to 5.0.1 and 4.5.4...

📅 2021-09-13
CVSS 8.0 Dossier →
Component: access_manager

Information leakage vulnerability in NetIQ Access Manager prior to 5.0.1 and 4.5.4...

📅 2021-09-13
CVSS 6.0 Dossier →
Component: access_manager

Open Redirection vulnerability in NetIQ Access Manager prior to 5.0.1 and 4.5.4...

📅 2021-09-13
CVSS 4.9 Dossier →
Component: access_manager

Injection attack caused the denial of service vulnerability in NetIQ Access Manager prior to 5.0.1 and 4.5.4...

📅 2021-09-13
CVSS 5.4 Dossier →
Component: network_automation

Open Redirect vulnerability in Micro Focus Network Automation, affecting Network Automation versions 10.4x, 10.5x, 2018.05, 2018.11, 2019.05, 2020.02,...

📅 2021-09-07
CVSS 6.1 Dossier →
Component: access_manager

This release addresses a potential information leakage vulnerability in NetIQ Access Manager versions prior to 5.0.1...

📅 2021-09-02
CVSS 5.5 Dossier →
Component: data_protector

A potential unauthorized privilege escalation vulnerability has been identified in Micro Focus Data Protector. The vulnerability affects versions 10.1...

📅 2021-08-05
CVSS 8.8 Dossier →
Component: zenworks_configuration_management

A privileged escalation vulnerability has been identified in Micro Focus ZENworks Configuration Management, affecting version 2020 Update 1 and all pr...

📅 2021-07-30
CVSS 6.7 Dossier →
Component: verastream_host_integrator

XML External Entity vulnerability in Micro Focus Verastream Host Integrator, affecting version 7.8 Update 1 and earlier versions. The vulnerability co...

📅 2021-07-22
CVSS 7.6 Dossier →
Component: verastream_host_integrator

Reflected Cross-Site Scripting vulnerability in Micro Focus Verastream Host Integrator, affecting version version 7.8 Update 1 and earlier versions. T...

📅 2021-07-22
CVSS 7.1 Dossier →
Component: netiq_advanced_authentication

Multi-Factor Authentication (MFA) functionality can be bypassed, allowing the use of single factor authentication in NetIQ Advanced Authentication ver...

📅 2021-07-12
CVSS 4.8 Dossier →
Component: secure_api_manager

Insertion of Sensitive Information into Log File vulnerability in Micro Focus Secure API Manager (SAPIM) product, affecting version 2.0.0. The vulnera...

📅 2021-06-04
CVSS 7.5 Dossier →
CVE-2021-22519 CRITICAL
Component: sitescope

Execute arbitrary code vulnerability in Micro Focus SiteScope product, affecting versions 11.40,11.41 , 2018.05(11.50), 2018.08(11.51), 2018.11(11.60)...

📅 2021-05-28
CVSS 9.8 Dossier →
CVE-2021-22514 CRITICAL
Component: application_performance_management

An arbitrary code execution vulnerability exists in Micro Focus Application Performance Management, affecting versions 9.40, 9.50 and 9.51. The vulner...

📅 2021-04-28
CVSS 9.8 Dossier →
CVE-2021-22505 CRITICAL
Component: operations_agent

Escalation of privileges vulnerability in Micro Focus Operations Agent, affects versions 12.0x, 12.10, 12.11, 12.12, 12.14 and 12.15. The vulnerabilit...

📅 2021-04-13
CVSS 9.8 Dossier →
Page 4 of 12 (271 Total Records)