Vulnerabilidades em Micro Focus

127 resultados
Análise Vexday

O portfólio da Micro Focus acumula 127 CVEs catalogadas, sem registros de exploração ativa confirmada no CISA KEV — taxa abaixo da média geral do catálogo —, e sem novas vulnerabilidades nos últimos 90 dias, o que sugere estabilidade recente no volume de descobertas. Ainda assim, o cenário exige atenção: 7 vulnerabilidades críticas estão presentes e, entre elas, CVE-2018-12464 apresenta EPSS de 0,8054, indicando alta probabilidade estatística de exploração, mesmo sendo uma falha mais antiga. A existência de PoC pública para 7 CVEs eleva o risco operacional, pois facilita a reprodução de ataques por atores menos sofisticados. A falha mais frequente é do tipo CWE-79 (Cross-Site Scripting), padrão que, apesar de frequentemente subestimado, pode ser utilizado em cadeias de ataque mais complexas envolvendo roubo de sessão e pivotamento lateral.

CVE-2018-12464CRITICALUnauthenticated SQL injection in Micro Focus Secure Messaging GatewayEPSS 80.5%CVE-2018-12465CRITICALRemote Code Execution in Micro Focus Secure Messaging GatewayEPSS 79.0%CVE-2020-11853HIGHArbitrary code execution vulnerability on multiple Micro Focus productsEPSS 77.0%CVE-2020-11854CRITICALArbitrary code execution vlnerability in Operation bridge Manager, Application Performance Management and Operations Bridge (containerized) products.EPSS 74.4%CVE-2017-14803—In NetIQ Access Manager 4.3 and 4.4, a bug exists in Identity Server when accessing a basic SSO connector and downloading the BasicSSO conneEPSS 34.6%CVE-2018-12463HIGHMFSBGN03811 rev.1 - Fortify Software Security Center (SSC), Multiple vulnerabilitiesEPSS 13.8%CVE-2017-8994—A input validation vulnerability in HPE Operations Orchestration product all versions prior to 10.80, allows for the execution of code remotEPSS 9.8%CVE-2019-3474MEDIUMPath traversal vulnerability in Filr web applicationEPSS 9.0%CVE-2018-18593MEDIUMMFSBGN03838 rev.1 - UCMDB Configuration Management Service, Multiple VulnerabilitiesEPSS 8.8%CVE-2018-7690MEDIUMMFSBGN03835 rev.1 - Fortify Software Security Center (SSC), Remote Unauthorized AccessEPSS 7.4%CVE-2018-7691MEDIUMMFSBGN03835 rev.1 - Fortify Software Security Center (SSC), Remote Unauthorized AccessEPSS 7.2%CVE-2017-14350—A potential security vulnerability has been identified in HPE Application Performance Management (BSM) Platform versions 9.26, 9.30, 9.40. TEPSS 7.0%CVE-2018-6500HIGHMFSBGN03824 rev.1 - ArcSight Management Center, Insufficient Access Control, Reflected Cross Site Scripting, Access Control vulnerability, Cross-Site Request Forgery (CSRF), Unauthenticated File Download, Directory Traversal VulnerabilityEPSS 4.0%CVE-2018-6498HIGHMicro Focus Container Deployment Foundation (CDF), Remote Code ExecutionEPSS 3.1%CVE-2020-11851—Arbitrary code execution vulnerability on Micro Focus ArcSight Logger product, affecting all version prior to 7.1.1. The vulnerability couldEPSS 2.8%CVE-2016-9176—Stack buffer overflow in the send.exe and receive.exe components of Micro Focus Rumba 9.4 and earlier could be used by local attackers or atEPSS 2.8%CVE-2020-11858HIGHCode execution with escalated privilegesn vlnerability in Operation bridge Manager and Operations Bridge (containerized) products.EPSS 2.7%CVE-2018-6490MEDIUMMFSBGN03801 rev.1 - Micro Focus Operations Orchestration, Remote Denial of Service (DoS)EPSS 2.6%CVE-2019-11654HIGHA path traversal vulnerability has been identified in Verastream Host IntegratorEPSS 2.6%CVE-2018-6505HIGHMFSBGN03824 rev.1 - ArcSight Management Center, Insufficient Access Control, Reflected Cross Site Scripting, Access Control vulnerability, Cross-Site Request Forgery (CSRF), Unauthenticated File Download, Directory Traversal VulnerabilityEPSS 2.5%