VYPR
← All advisories
High severity7.5NVD Advisory· Published Apr 1, 2019· Updated Jun 17, 2026

CVE-2019-3489

CVE-2019-3489

Description

An unauthenticated file upload vulnerability has been identified in the Web Client component of Micro Focus Content Manager 9.1, 9.2, and 9.3 when configured to use the ADFS authentication method. The vulnerability could be exploited by an unauthenticated remote attacker to upload content to arbitrary locations on the Content Manager server.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3
  • Microfocus/Content Manager2 versions
    cpe:2.3:a:microfocus:content_manager:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:microfocus:content_manager:*:*:*:*:*:*:*:*range: >=9.1,<=9.3
    • (no CPE)range: 9.1, 9.2, and 9.3
  • Micro Focus/Micro Focus Content Managerv5
    Range: 9.1

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.