Vulnerabilities > Microfocus > Service Manager > 9.41

DATE CVE VULNERABILITY TITLE RISK
2020-03-16 CVE-2020-9519 Unspecified vulnerability in Microfocus Service Manager
HTTP methods reveled in Web services vulnerability in Micro Focus Service manager (server), affecting versions 9.40, 9.41, 9.50, 9.51, 9.52, 9.60, 9.61, 9.62, 9.63.
network
low complexity
microfocus
5.3
2019-09-18 CVE-2019-11664 Insufficiently Protected Credentials vulnerability in Microfocus Service Manager
Clear text password in browser in Micro Focus Service Manager product versions 9.30, 9.31, 9.32, 9.33, 9.34, 9.35, 9.40, 9.41, 9.50, 9.51, 9.52, 9.60, 9.61, 9.62.
network
low complexity
microfocus CWE-522
6.5
2019-09-18 CVE-2019-11663 Insufficiently Protected Credentials vulnerability in Microfocus Service Manager
Clear text credentials are used to access managers app in Tomcat in Micro Focus Service Manager product versions 9.30, 9.31, 9.32, 9.33, 9.34, 9.35, 9.40, 9.41, 9.50, 9.51, 9.52, 9.60, 9.61, 9.62.
network
low complexity
microfocus CWE-522
6.5
2019-09-18 CVE-2019-11662 Information Exposure Through an Error Message vulnerability in Microfocus Service Manager
Class and method names in error message in Micro Focus Service Manager product versions 9.30, 9.31, 9.32, 9.33, 9.34, 9.35, 9.40, 9.41, 9.50, 9.51, 9.52, 9.60, 9.61, 9.62.
network
low complexity
microfocus CWE-209
4.3
2019-09-18 CVE-2019-11661 Unspecified vulnerability in Microfocus Service Manager
Allow changes to some table by non-SysAdmin in Micro Focus Service Manager product versions 9.30, 9.31, 9.32, 9.33, 9.34, 9.35, 9.40, 9.41, 9.50, 9.51, 9.52, 9.60, 9.61, 9.62.
network
low complexity
microfocus
8.3
2019-09-17 CVE-2019-11665 Unspecified vulnerability in Microfocus Service Manager
Data exposure in Micro Focus Service Manager product versions 9.30, 9.31, 9.32, 9.33, 9.34, 9.35, 9.40, 9.41, 9.50, 9.51, 9.52, 9.60, 9.61, 9.62.
network
low complexity
microfocus
7.5
2019-09-17 CVE-2019-11666 Deserialization of Untrusted Data vulnerability in Microfocus Service Manager
Insecure deserialization of untrusted data in Micro Focus Service Manager product versions 9.30, 9.31, 9.32, 9.33, 9.34, 9.35, 9.40, 9.41, 9.50, 9.51, 9.52, 9.60, 9.61, 9.62.
network
low complexity
microfocus CWE-502
8.8
2019-09-17 CVE-2019-11667 Unspecified vulnerability in Microfocus Service Manager
Unauthorized access to contact information in Micro Focus Service Manager, versions 9.41, 9.50, 9.51, 9.52, 9.60, 9.61, 9.62.
network
low complexity
microfocus
7.5
2019-09-10 CVE-2019-11668 Unspecified vulnerability in Microfocus products
HTTP cookie in Micro Focus Service manager, Versions 9.30, 9.31, 9.32, 9.33, 9.34, 9.35, 9.40, 9.41, 9.50, 9.51, 9.52, 9.60, 9.61, 9.62.
network
low complexity
microfocus
7.5
2019-06-03 CVE-2019-11646 Unspecified vulnerability in Microfocus Service Manager
Remote unauthorized command execution and unauthorized disclosure of information in Micro Focus Service Manager, versions 9.30, 9.31, 9.32, 9.33, 9.34, 9.35, 9.40, 9.41, 9.50, 9.51, 9.52, 9.60, 9.61.
network
low complexity
microfocus
8.8