Vulnerabilities > Microfocus

DATE CVE VULNERABILITY TITLE RISK
2020-12-11 CVE-2020-25838 Unspecified vulnerability in Microfocus Filr
Unauthorized disclosure of sensitive information vulnerability in Micro Focus Filr product.
network
low complexity
microfocus
6.5
2020-11-20 CVE-2020-25839 SQL Injection vulnerability in Microfocus Identity Manager 4.8
NetIQ Identity Manager 4.8 prior to version 4.8 SP2 HF1 are affected by an injection vulnerability.
network
low complexity
microfocus CWE-89
critical
9.8
2020-11-17 CVE-2020-25833 Cross-site Scripting vulnerability in Microfocus Idol
Persistent cross-Site Scripting vulnerability on Micro Focus IDOL product, affecting all version prior to version 12.7.
network
low complexity
microfocus CWE-79
4.8
2020-11-17 CVE-2020-25832 Cross-site Scripting vulnerability in Microfocus Filr 4.2.1
Reflected Cross Site scripting vulnerability on Micro Focus Filr product, affecting version 4.2.1.
network
low complexity
microfocus CWE-79
5.4
2020-11-17 CVE-2020-11851 Code Injection vulnerability in Microfocus Arcsight Logger 6.61/7.0/7.0.1
Arbitrary code execution vulnerability on Micro Focus ArcSight Logger product, affecting all version prior to 7.1.1.
network
low complexity
microfocus CWE-94
critical
9.8
2020-11-17 CVE-2020-25834 Cross-site Scripting vulnerability in Microfocus Arcsight Logger 6.61/7.0/7.0.1
Cross-Site Scripting vulnerability on Micro Focus ArcSight Logger product, affecting version 7.1.
network
low complexity
microfocus CWE-79
5.4
2020-11-17 CVE-2020-11860 Cross-site Scripting vulnerability in Microfocus Arcsight Logger 6.61/7.0/7.0.1
Cross-Site Scripting vulnerability on Micro Focus ArcSight Logger product, affecting all version prior to 7.1.1.
network
low complexity
microfocus CWE-79
6.1
2020-11-05 CVE-2020-25837 Unspecified vulnerability in Microfocus Self Service Password Reset
Sensitive information disclosure vulnerability in Micro Focus Self Service Password Reset (SSPR) product.
network
low complexity
microfocus
7.5
2020-10-27 CVE-2020-11858 Unspecified vulnerability in Microfocus Operations Bridge and Operations Bridge Manager
Code execution with escalated privileges vulnerability in Micro Focus products Operation Bridge Manager and Operation Bridge (containerized).
local
low complexity
microfocus
7.8
2020-10-27 CVE-2020-11854 Use of Hard-coded Credentials vulnerability in Microfocus products
Arbitrary code execution vlnerability in Operation bridge Manager, Application Performance Management and Operations Bridge (containerized) vulnerability in Micro Focus products products Operation Bridge Manager, Operation Bridge (containerized) and Application Performance Management.
network
low complexity
microfocus CWE-798
critical
9.8