Vulnerabilities > Microfocus
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2024-11-22 | CVE-2021-38116 | Command Injection vulnerability in Microfocus Imanager Possible Elevation of Privilege Vulnerability in iManager has been discovered in OpenText™ iManager. | 8.8 |
| 2024-11-22 | CVE-2021-38117 | Command Injection vulnerability in Microfocus Imanager Possible Command injection Vulnerability in iManager has been discovered in OpenText™ iManager 3.2.4.0000. | 9.8 |
| 2024-11-22 | CVE-2021-38118 | Unspecified vulnerability in Microfocus Imanager Possible improper input validation Vulnerability in iManager has been discovered in OpenText™ iManager 3.2.4.0000. | 7.8 |
| 2024-11-22 | CVE-2021-38119 | Cross-site Scripting vulnerability in Microfocus Imanager Possible Reflected Cross-Site Scripting (XSS) Vulnerability in iManager has been discovered in OpenText™ iManager 3.2.4.0000. | 6.1 |
| 2024-11-22 | CVE-2021-38134 | Cross-site Scripting vulnerability in Microfocus Imanager Possible XSS in iManager URL for access Component has been discovered in OpenText™ iManager 3.2.5.0000. | 6.1 |
| 2024-11-22 | CVE-2021-38135 | Unspecified vulnerability in Microfocus Imanager Possible External Service Interaction attack in iManager has been discovered in OpenText™ iManager 3.2.6.0000. | 9.8 |
| 2024-11-22 | CVE-2022-26324 | Cross-site Scripting vulnerability in Microfocus Imanager 3.2.6 Possible XSS in iManager URL for access Component has been discovered in OpenText™ iManager 3.2.6.0000. | 5.4 |
| 2024-11-22 | CVE-2023-24466 | XXE vulnerability in Microfocus Imanager Possible XML External Entity Injection in iManager GET parameter has been discovered in OpenText™ iManager 3.2.6.0200. | 9.8 |
| 2024-11-22 | CVE-2023-24467 | Command Injection vulnerability in Microfocus Imanager Possible Command Injection in iManager GET parameter has been discovered in OpenText™ iManager 3.2.6.0000. | 9.8 |
| 2024-11-08 | CVE-2024-9841 | Cross-site Scripting vulnerability in Microfocus Arcsight Management Center and Arcsight Platform A Reflected Cross-Site Scripting (XSS) vulnerability has been identified in OpenText ArcSight Management Center and ArcSight Platform. | 6.1 |