microfocus Vulnerability Advisory Catalog

Total 271 security vulnerabilities recorded for microfocus software and firmware.

← Back to All Vendors
Component: netiq_advanced_authentication

Advanced Authentication versions prior to 6.3 SP4 have a potential broken authentication due to improper session management issue....

📅 2021-04-12
CVSS 3.8 Dossier →
Component: application_automation_tools

Missing Authorization vulnerability in Micro Focus Application Automation Tools Plugin - Jenkins plugin. The vulnerability affects version 6.7 and ear...

📅 2021-04-08
CVSS 6.5 Dossier →
Component: application_automation_tools

Cross-Site Request Forgery (CSRF) vulnerability in Micro Focus Application Automation Tools Plugin - Jenkins plugin. The vulnerability affects version...

📅 2021-04-08
CVSS 6.5 Dossier →
Component: application_automation_tools

Improper Certificate Validation vulnerability in Micro Focus Application Automation Tools Plugin - Jenkins plugin. The vulnerability affects version 6...

📅 2021-04-08
CVSS 6.5 Dossier →
Component: application_automation_tools

Reflected XSS vulnerability in Micro Focus Application Automation Tools Plugin - Jenkins plugin. The vulnerability affects all version 6.7 and earlier...

📅 2021-04-08
CVSS 6.1 Dossier →
CVE-2021-22507 CRITICAL
Component: operations_bridge_manager

Authentication bypass vulnerability in Micro Focus Operations Bridge Manager affects versions 2019.05, 2019.11, 2020.05 and 2020.10. The vulnerability...

📅 2021-04-08
CVSS 9.8 Dossier →
Component: access_manager

Advance configuration exposing Information Leakage vulnerability in Micro Focus Access Manager product, affects all versions prior to version 5.0. The...

📅 2021-03-26
CVSS 7.5 Dossier →
Component: access_manager

Cross-Site scripting vulnerability in Micro Focus Access Manager product, affects all version prior to version 5.0. The vulnerability could cause conf...

📅 2021-03-26
CVSS 6.1 Dossier →
Component: access_manager

Authentication Bypass Vulnerability in Micro Focus Access Manager Product, affects all version prior to version 4.5.3.3. The vulnerability could cause...

📅 2021-03-25
CVSS 7.5 Dossier →
Component: solutions_business_manager

Micro Focus Solutions Business Manager Application Repository versions prior to 11.7.1 are vulnerable to information disclosure....

📅 2021-02-26
CVSS 3.5 Dossier →
Component: solutions_business_manager

Micro Focus Solutions Business Manager Application Repository versions prior to 11.7.1 are vulnerable to session fixation....

📅 2021-02-26
CVSS 4.8 Dossier →
Component: solutions_business_manager

Micro Focus Solutions Business Manager Application Repository versions prior to 11.7.1 are vulnerable to privilege escalation vulnerability....

📅 2021-02-26
CVSS 7.3 Dossier →
Component: solutions_business_manager

Micro Focus Solutions Business Manager Application Repository versions prior to 11.7.1 are vulnerable to reflected XSS....

📅 2021-02-26
CVSS 4.9 Dossier →
Component: solutions_business_manager

Micro Focus Solutions Business Manager versions prior to 11.7.1 are vulnerable to XML External Entity Processing (XXE) on certain operations....

📅 2021-02-26
CVSS 6.1 Dossier →
Component: solutions_business_manager

Micro Focus Solutions Business Manager versions prior to 11.7.1 are vulnerable to stored XSS. The application reflects previously stored user input wi...

📅 2021-02-26
CVSS 5.5 Dossier →
CVE-2021-22504 CRITICAL
Component: operations_bridge_manager

Arbitrary code execution vulnerability on Micro Focus Operations Bridge Manager product, affecting versions 10.1x, 10.6x, 2018.05, 2018.11, 2019.05, 2...

📅 2021-02-12
CVSS 9.8 Dossier →
CVE-2021-22502 CRITICAL
Component: operation_bridge_reporter

Remote Code execution vulnerability in Micro Focus Operation Bridge Reporter (OBR) product, affecting version 10.40. The vulnerability could be exploi...

📅 2021-02-08
CVSS 9.8 Dossier →
Component: application_performance_management

Cross Site Request Forgery vulnerability in Micro Focus Application Performance Management product, affecting versions 9.40, 9.50 and 9.51. The vulner...

📅 2021-02-06
CVSS 6.5 Dossier →
Component: application_performance_management

Persistent Cross-Site scripting vulnerability in Micro Focus Application Performance Management product, affecting versions 9.40, 9.50 and 9.51. The v...

📅 2021-02-06
CVSS 4.8 Dossier →
Component: application_lifecycle_management

XML External Entity Injection vulnerability in Micro Focus Application Lifecycle Management (Previously known as Quality Center) product. The vulnerab...

📅 2021-01-19
CVSS 8.1 Dossier →
Component: filr

Unauthorized disclosure of sensitive information vulnerability in Micro Focus Filr product. Affecting all 3.x and 4.x versions. The vulnerability coul...

📅 2020-12-11
CVSS 6.5 Dossier →
CVE-2020-25839 CRITICAL
Component: identity_manager

NetIQ Identity Manager 4.8 prior to version 4.8 SP2 HF1 are affected by an injection vulnerability. This vulnerability is fixed in NetIQ IdM 4.8 SP2 H...

📅 2020-11-20
CVSS 9.8 Dossier →
Component: idol

Persistent cross-Site Scripting vulnerability on Micro Focus IDOL product, affecting all version prior to version 12.7. The vulnerability could be exp...

📅 2020-11-17
CVSS 4.8 Dossier →
Component: filr

Reflected Cross Site scripting vulnerability on Micro Focus Filr product, affecting version 4.2.1. The vulnerability could be exploited to perform Ref...

📅 2020-11-17
CVSS 5.4 Dossier →
Page 5 of 12 (271 Total Records)