Vulnerabilidades em Micro Focus

127 resultados
Análise Vexday

O portfólio da Micro Focus acumula 127 CVEs catalogadas, sem registros de exploração ativa confirmada no CISA KEV — taxa abaixo da média geral do catálogo —, e sem novas vulnerabilidades nos últimos 90 dias, o que sugere estabilidade recente no volume de descobertas. Ainda assim, o cenário exige atenção: 7 vulnerabilidades críticas estão presentes e, entre elas, CVE-2018-12464 apresenta EPSS de 0,8054, indicando alta probabilidade estatística de exploração, mesmo sendo uma falha mais antiga. A existência de PoC pública para 7 CVEs eleva o risco operacional, pois facilita a reprodução de ataques por atores menos sofisticados. A falha mais frequente é do tipo CWE-79 (Cross-Site Scripting), padrão que, apesar de frequentemente subestimado, pode ser utilizado em cadeias de ataque mais complexas envolvendo roubo de sessão e pivotamento lateral.

CVE-2021-22528HIGHInformation leakage vulnerability in NetIQ Access Manager versions prior to version 4.5.4 and 5.0.1EPSS 0.6%CVE-2018-6497HIGHMFSBGN03810 rev.1 - Universal CMDB, Deserialization Java Objects and CSRFEPSS 0.6%CVE-2018-6504HIGHMFSBGN03824 rev.1 - ArcSight Management Center, Insufficient Access Control, Reflected Cross Site Scripting, Access Control vulnerability, Cross-Site Request Forgery (CSRF), Unauthenticated File Download, Directory Traversal VulnerabilityEPSS 0.6%CVE-2019-18945HIGHprivilege escalationEPSS 0.6%CVE-2017-14363MEDIUMMFSBGN03795 rev.1 - Micro Focus Operations Manager i - Remote Cross-Site Scripting (XSS)EPSS 0.5%CVE-2017-14359—MFSBGN03788 rev.1 - HPE Performance Center, Remote Cross-Site Scripting (XSS)EPSS 0.5%CVE-2019-11664—Clear text password in browser in Micro Focus Service Manager product versions 9.30, 9.31, 9.32, 9.33, 9.34, 9.35, 9.40, 9.41, 9.50, 9.51, 9EPSS 0.5%CVE-2020-25833—Persistent cross-Site Scripting vulnerability on Micro Focus IDOL product, affecting all version prior to version 12.7. The vulnerability coEPSS 0.5%CVE-2018-19644MEDIUMSolutions Business Manager (SBM) reflected cross site script issue in version prior to 11.5EPSS 0.5%CVE-2018-7681—Micro Focus Solutions Business Manager versions prior to 11.4 allows JavaScript to be embedded in URLs placed in "Favorites" folder. If the EPSS 0.5%CVE-2020-25832—Reflected Cross Site scripting vulnerability on Micro Focus Filr product, affecting version 4.2.1. The vulnerability could be exploited to pEPSS 0.5%CVE-2017-14362HIGHMFSBGN03793 rev.1 - Project and Portfolio Management Center, Multiple vulnerabilitiesEPSS 0.5%CVE-2021-22526MEDIUMOpen Redirection vulnerability in NetIQ Access Manager versions prior to version 4.5.4 and 5.0.1EPSS 0.5%CVE-2019-11663—Clear text credentials are used to access managers app in Tomcat in Micro Focus Service Manager product versions 9.30, 9.31, 9.32, 9.33, 9.3EPSS 0.5%CVE-2022-26329LOWFile existence disclosue vulnerability in IDM pluginEPSS 0.5%CVE-2023-32265HIGHMitigations and availability of updates relating to security vulnerability in ESCWA component CVE-2023-32265.EPSS 0.5%CVE-2022-38758HIGHXSS vulnerabilities in iManagerEPSS 0.5%CVE-2022-26331MEDIUMPotential vulnerabilities have been identified in Micro Focus ArcSight Logger. The vulnerabilities could be remotely exploited resulting in Self Cross-Site Scripting (XSS).EPSS 0.4%CVE-2020-25835MEDIUMMicro Focus ArcSight Management Center Remote VulnerabilityEPSS 0.4%CVE-2022-26326MEDIUMPotential open redirection vulnerability in NetIQ Access Manager versions prior to version 5.0.2EPSS 0.4%