Vulnerabilities > Microfocus > Enterprise Server Monitor AND Control > Critical

DATE CVE VULNERABILITY TITLE RISK
2017-08-21 CVE-2017-7420 Improper Authentication vulnerability in Microfocus products
An Authentication Bypass (CWE-287) vulnerability in ESMAC (aka Enterprise Server Monitor and Control) in Micro Focus Enterprise Developer and Enterprise Server 2.3 and earlier, 2.3 Update 1 before Hotfix 8, and 2.3 Update 2 before Hotfix 9 allows remote unauthenticated attackers to view and alter configuration information and alter the state of the running product (CWE-275).
network
low complexity
microfocus CWE-287
critical
9.8