Vulnerabilities > Microfocus
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2023-09-12 | CVE-2023-4501 | Improper Authentication vulnerability in Microfocus products User authentication with username and password credentials is ineffective in OpenText (Micro Focus) Visual COBOL, COBOL Server, Enterprise Developer, and Enterprise Server (including product variants such as Enterprise Test Server), versions 7.0 patch updates 19 and 20, 8.0 patch updates 8 and 9, and 9.0 patch update 1, when LDAP-based authentication is used with certain configurations. | 9.8 |
| 2023-08-11 | CVE-2023-32267 | Unspecified vulnerability in Microfocus Arcsight Management Center A potential vulnerability has been identified in OpenText / Micro Focus ArcSight Management Center. | 8.8 |
| 2023-07-20 | CVE-2023-32265 | Unspecified vulnerability in Microfocus products A potential security vulnerability has been identified in the Enterprise Server Common Web Administration (ESCWA) component used in Enterprise Server, Enterprise Test Server, Enterprise Developer, Visual COBOL, and COBOL Server. An attacker would need to be authenticated into ESCWA to attempt to exploit this vulnerability. | 6.5 |
| 2023-07-19 | CVE-2023-32261 | Unspecified vulnerability in Microfocus Dimensions CM A potential vulnerability has been identified in the Micro Focus Dimensions CM Plugin for Jenkins. | 6.5 |
| 2023-07-19 | CVE-2023-32262 | Unspecified vulnerability in Microfocus Dimensions CM A potential vulnerability has been identified in the Micro Focus Dimensions CM Plugin for Jenkins. | 6.5 |
| 2023-07-19 | CVE-2023-32263 | Unspecified vulnerability in Microfocus Dimensions CM A potential vulnerability has been identified in the Micro Focus Dimensions CM Plugin for Jenkins. | 5.7 |
| 2023-06-13 | CVE-2023-24470 | XXE vulnerability in Microfocus Arcsight Logger Potential XML External Entity Injection in ArcSight Logger versions prior to 7.3.0. | 9.1 |
| 2023-06-13 | CVE-2023-24469 | Cross-site Scripting vulnerability in Microfocus Arcsight Logger Potential Cross-Site Scripting in ArcSight Logger versions prior to 7.3.0 | 6.1 |
| 2023-03-15 | CVE-2023-24468 | Unspecified vulnerability in Microfocus Netiq Advanced Authentication Broken access control in Advanced Authentication versions prior to 6.4.1.1 and 6.3.7.2 | 9.8 |
| 2022-12-23 | CVE-2022-38757 | Improper Privilege Management vulnerability in Microfocus Zenworks 2020 A vulnerability has been identified in Micro Focus ZENworks 2020 Update 3a and prior versions. | 7.2 |