Vulnerabilities > Microfocus > Service Management Automation > 2018.08

DATE CVE VULNERABILITY TITLE RISK
2020-05-29 CVE-2020-11844 Incorrect Authorization vulnerability in Microfocus Service Management Automation
Incorrect Authorization vulnerability in Micro Focus Container Deployment Foundation component affects products: - Hybrid Cloud Management.
network
low complexity
microfocus CWE-863
critical
 9.8
9.8
2019-02-11 CVE-2019-5736 OS Command Injection vulnerability in multiple products
runc through 1.0-rc6, as used in Docker before 18.09.2 and other products, allows attackers to overwrite the host runc binary (and consequently obtain host root access) by leveraging the ability to execute a command as root within one of these types of containers: (1) a new container with an attacker-controlled image, or (2) an existing container, to which the attacker previously had write access, that can be attached with docker exec. 		8.6
8.6