Vendor CVEs

Microfocus

All CVEs

2,192 total · sorted by risk

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	Published	Description
CVE-2019-5369	HPE Intelligent Management Center (iMC) PLAT	Hig	0.57	8.8	0.03	Jun 5, 2019	A remote code execution vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than version 7.3 E0506P09.
CVE-2019-5368	HPE Intelligent Management Center (iMC) PLAT	Hig	0.57	8.8	0.03	Jun 5, 2019	A remote code execution vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than version 7.3 E0506P09.
CVE-2019-5366	HPE Intelligent Management Center (iMC) PLAT	Hig	0.57	8.8	0.04	Jun 5, 2019	A remote code execution vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than version 7.3 E0506P09.
CVE-2019-5365	HPE Intelligent Management Center (iMC) PLAT	Hig	0.57	8.8	0.04	Jun 5, 2019	A remote code execution vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than version 7.3 E0506P09.
CVE-2019-5364	HPE Intelligent Management Center (iMC) PLAT	Hig	0.57	8.8	0.04	Jun 5, 2019	A remote code execution vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than version 7.3 E0506P09.
CVE-2019-5363	HPE Intelligent Management Center (iMC) PLAT	Hig	0.57	8.8	0.04	Jun 5, 2019	A remote code execution vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than version 7.3 E0506P09.
CVE-2019-5362	HPE Intelligent Management Center (iMC) PLAT	Hig	0.57	8.8	0.04	Jun 5, 2019	A remote code execution vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than version 7.3 E0506P09.
CVE-2019-5361	HPE Intelligent Management Center (iMC) PLAT	Hig	0.57	8.8	0.04	Jun 5, 2019	A remote code execution vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than version 7.3 E0506P09.
CVE-2019-5360	HPE Intelligent Management Center (iMC) PLAT	Hig	0.57	8.8	0.04	Jun 5, 2019	A remote code execution vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than version 7.3 E0506P09.
CVE-2019-5359	HPE Intelligent Management Center (iMC) PLAT	Hig	0.57	8.8	0.04	Jun 5, 2019	A remote code execution vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than version 7.3 E0506P09.
CVE-2019-5357	HPE Intelligent Management Center (iMC) PLAT	Hig	0.57	8.8	0.03	Jun 5, 2019	A remote code execution vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than version 7.3 E0506P09.
CVE-2019-5354	HPE Intelligent Management Center (iMC) PLAT	Hig	0.57	8.8	0.04	Jun 5, 2019	A remote code execution vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than version 7.3 E0506P09.
CVE-2019-5353	HPE Intelligent Management Center (iMC) PLAT	Hig	0.57	8.8	0.04	Jun 5, 2019	A remote code execution vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than version 7.3 E0506P09.
CVE-2019-5351	HPE Intelligent Management Center (iMC) PLAT	Hig	0.57	8.8	0.04	Jun 5, 2019	A remote code execution vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than version 7.3 E0506P09.
CVE-2019-5349	HPE Intelligent Management Center (iMC) PLAT	Hig	0.57	8.8	0.04	Jun 5, 2019	A remote code execution vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than version 7.3 E0506P09.
CVE-2019-5348	HPE Intelligent Management Center (iMC) PLAT	Hig	0.57	8.8	0.04	Jun 5, 2019	A remote code execution vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than version 7.3 E0506P09.
CVE-2019-5346	HPE Intelligent Management Center (iMC) PLAT	Hig	0.57	8.8	0.04	Jun 5, 2019	A remote code execution vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than version 7.3 E0506P09.
CVE-2019-5345	HPE Intelligent Management Center (iMC) PLAT	Hig	0.57	8.8	0.04	Jun 5, 2019	A remote code execution vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than version 7.3 E0506P09.
CVE-2019-5344	HPE Intelligent Management Center (iMC) PLAT	Hig	0.57	8.8	0.04	Jun 5, 2019	A remote code execution vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than version 7.3 E0506P09.
CVE-2019-5343	HPE Intelligent Management Center (iMC) PLAT	Hig	0.57	8.8	0.04	Jun 5, 2019	A remote code execution vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than version 7.3 E0506P09.
CVE-2019-5342	HPE Intelligent Management Center (iMC) PLAT	Hig	0.57	8.8	0.04	Jun 5, 2019	A remote code execution vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than version 7.3 E0506P09.
CVE-2019-5341	HPE Intelligent Management Center (iMC) PLAT	Hig	0.57	8.8	0.03	Jun 5, 2019	A remote code execution vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than version 7.3 E0506P09.
CVE-2019-5340	HPE Intelligent Management Center (iMC) PLAT	Hig	0.57	8.8	0.03	Jun 5, 2019	A remote code execution vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than version 7.3 E0506P09.
CVE-2019-5339	HPE Intelligent Management Center (iMC) PLAT	Hig	0.57	8.8	0.03	Jun 5, 2019	A remote code execution vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than version 7.3 E0506P09.
CVE-2019-5338	HPE Intelligent Management Center (iMC) PLAT	Hig	0.57	8.8	0.03	Jun 5, 2019	A remote code execution vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than version 7.3 E0506P09.
CVE-2019-11948	HPE Intelligent Management Center (iMC) PLAT	Hig	0.57	8.8	0.04	Jun 5, 2019	A remote code execution vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than version 7.3 E0506P09.
CVE-2019-11947	HPE Intelligent Management Center (iMC) PLAT	Hig	0.57	8.8	0.03	Jun 5, 2019	A remote code execution vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than version 7.3 E0506P09.
CVE-2019-11943	HPE Intelligent Management Center (iMC) PLAT	Hig	0.57	8.8	0.04	Jun 5, 2019	A remote code execution vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than version 7.3 E0506P09.
CVE-2019-11942	HPE Intelligent Management Center (iMC) PLAT	Hig	0.57	8.8	0.04	Jun 5, 2019	A remote code execution vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than version 7.3 E0506P09.
CVE-2019-11941	HPE Intelligent Management Center (iMC) PLAT	Hig	0.57	8.8	0.03	Jun 5, 2019	A remote code execution vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than version 7.3 E0506P09.
CVE-2019-11646	Microfocus Service Manager	Hig	0.57	8.8	0.03	Jun 3, 2019	Remote unauthorized command execution and unauthorized disclosure of information in Micro Focus Service Manager, versions 9.30, 9.31, 9.32, 9.33, 9.34, 9.35, 9.40, 9.41, 9.50, 9.51, 9.52, 9.60, 9.61. This vulnerability could allow Remote unauthorized command execution and…
CVE-2019-3493	Microfocus Network Automation Software	Hig	0.57	8.8	0.02	Apr 29, 2019	A potential security vulnerability has been identified in Micro Focus Network Automation Software 9.20, 9.21, 10.00, 10.10, 10.20, 10.30, 10.40, 10.50, 2018.05, 2018.08, 2018.11, and Micro Focus Network Operations Management (NOM) all versions. The vulnerability could be…
CVE-2018-5921	Microfocus printers and MFPs	Hig	0.57	8.8	0.01	Oct 3, 2018	A potential security vulnerability has been identified with certain HP printers and MFPs in 2405129_000052 and other firmware versions. This vulnerability is known as Cross Site Request Forgery, and could potentially be exploited remotely to allow elevation of privilege.
CVE-2018-6504	Microfocus Arcsight Management Center	Hig	0.57	8.8	0.01	Sep 20, 2018	A potential Cross-Site Request Forgery (CSRF) vulnerability has been identified in ArcSight Management Center (ArcMC) in all versions prior to 2.81. This vulnerability could be exploited to allow for Cross-Site Request Forgery (CSRF).
CVE-2018-6498	Microfocus Hybrid Cloud Management Containerized Suite	Hig	0.57	8.8	0.03	Aug 30, 2018	Remote Code Execution in the following products Hybrid Cloud Management Containerized Suite HCM2017.11, HCM2018.02, HCM2018.05, Operations Bridge Containerized Suite 2017.11, 2018.02, 2018.05, Data Center Automation Containerized Suite 2017.01 until 2018.05, Service Management…
CVE-2018-9023	Microfocus Privileged User Manager	Hig	0.57	8.8	0.02	Jun 18, 2018	An input validation vulnerability in CA Privileged Access Manager 2.x allows unprivileged users to execute arbitrary commands by passing specially crafted arguments to the update_crld script.
CVE-2018-6497	Microfocus CMS Server	Hig	0.57	8.8	0.01	Jun 16, 2018	Remote Cross-site Request forgery (CSRF) potential has been identified in UCMBD Server version DDM Content Pack V 10.20, 10.21, 10.22, 10.22 CUP7, 10.30, 10.31, 10.32, 10.33, 10.33 CUP2, 11.0 and CMS Server version 2018.05 BACKGROUND which could allow for remote unsafe…
CVE-2018-6496	Microfocus UCMBD Browser	Hig	0.57	8.8	0.01	Jun 16, 2018	Remote Cross-site Request forgery (CSRF) potential has been identified in UCMBD Browser version 4.10, 4.11, 4.12, 4.13, 4.14, 4.15, 4.15.1 which could allow for remote unsafe deserialization and cross-site request forgery (CSRF).
CVE-2018-6493	Microfocus Network Automation	Hig	0.57	8.8	0.02	May 22, 2018	SQL Injection in HP Network Operations Management Ultimate, version 2017.07, 2017.11, 2018.02 and in Network Automation, version 10.00, 10.10, 10.11, 10.20, 10.30, 10.40, 10.50. This vulnerability could be remotely exploited to allow Remote SQL Injection.
CVE-2017-7429	Microfocus Edirectory	Hig	0.57	8.8	0.01	Mar 2, 2018	The certificate upload in NetIQ eDirectory PKI plugin before 8.8.8 Patch 10 Hotfix 1 could be abused to upload JSP code which could be used by authenticated attackers to execute JSP applets on the iManager server.
CVE-2017-13982	HPE BSM Platform Application Performance Management System Health	Hig	0.57	8.8	0.03	Sep 30, 2017	A directory traversal vulnerability in HPE BSM Platform Application Performance Management System Health product versions 9.26, 9.30 and 9.40, allows users to upload unrestricted files.
CVE-2017-7423	Microfocus Enterprise Developer	Hig	0.57	8.8	0.01	Aug 21, 2017	A Cross-Site Request Forgery (CWE-352) vulnerability in esfadmingui in Micro Focus Enterprise Developer and Enterprise Server 2.3, 2.3 Update 1 before Hotfix 8, and 2.3 Update 2 before Hotfix 9 allows remote unauthenticated attackers to forge requests, if this component is…
CVE-2017-5187	Microfocus Directory Server	Hig	0.57	8.8	0.01	Aug 21, 2017	A Cross-Site Request Forgery (CWE-352) vulnerability in Directory Server (aka Enterprise Server Administration web UI) in Micro Focus Enterprise Developer and Enterprise Server 2.3 and earlier, 2.3 Update 1 before Hotfix 8, and 2.3 Update 2 before Hotfix 9 allows remote…
CVE-2017-7431	Novell Imanager	Hig	0.57	8.8	0.01	May 3, 2017	Novell iManager 2.7.x before 2.7 SP7 Patch 10 HF1 and NetIQ iManager 3.x before 3.0.3.1 have persistent CSRF in object management.
CVE-2016-5758	Microfocus Access Manager	Hig	0.57	8.8	0.01	Mar 23, 2017	A cross site request forgery protection mechanism in NetIQ Access Manager 4.1 before 4.1.2 Hot Fix 1 and 4.2 before 4.2.2 could be circumvented by repeated uploads causing a high load.
CVE-2016-5750	Microfocus Access Manager	Hig	0.57	8.8	0.01	Mar 23, 2017	The certificate upload feature in iManager in NetIQ Access Manager 4.1 before 4.1.2 Hot Fix 1 and 4.2 before 4.2.2 could be used to upload JSP pages that would be executed as the iManager user, allowing code execution by logged-in remote users.
CVE-2016-1597	Microfocus Access Governance Suite	Hig	0.57	8.8	0.01	Mar 23, 2017	A logged-in user in NetIQ Access Governance Suite 6.0 through 6.4 could escalate privileges to administrator.
CVE-2016-5387	Apache HTTP Server	Hig	0.57	8.1	0.56	Jul 19, 2016	The Apache HTTP Server through 2.4.23 follows RFC 3875 section 4.1.18 and therefore does not protect applications from the presence of untrusted client data in the HTTP_PROXY environment variable, which might allow remote attackers to redirect an application's outbound HTTP…
CVE-2016-5385	PHP PHP	Hig	0.57	8.1	0.50	Jul 19, 2016	PHP through 7.0.8 does not attempt to address RFC 3875 section 4.1.18 namespace conflicts and therefore does not protect applications from the presence of untrusted client data in the HTTP_PROXY environment variable, which might allow remote attackers to redirect an…
CVE-2016-4369	HPE Discovery and Dependency Mapping Inventory	Hig	0.57	8.8	0.02	Jun 8, 2016	HPE Discovery and Dependency Mapping Inventory (DDMi) 9.30, 9.31, 9.32, 9.32 update 1, 9.32 update 2, and 9.32 update 3 allows remote authenticated users to execute arbitrary commands via a crafted serialized Java object, related to the Apache Commons Collections library.

CVE-2019-5369HigJun 5, 2019
HPE
Intelligent Management Center (iMC) PLAT
risk 0.57cvss 8.8epss 0.03
A remote code execution vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than version 7.3 E0506P09.
CVE-2019-5368HigJun 5, 2019
HPE
Intelligent Management Center (iMC) PLAT
risk 0.57cvss 8.8epss 0.03
A remote code execution vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than version 7.3 E0506P09.
CVE-2019-5366HigJun 5, 2019
HPE
Intelligent Management Center (iMC) PLAT
risk 0.57cvss 8.8epss 0.04
A remote code execution vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than version 7.3 E0506P09.
CVE-2019-5365HigJun 5, 2019
HPE
Intelligent Management Center (iMC) PLAT
risk 0.57cvss 8.8epss 0.04
A remote code execution vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than version 7.3 E0506P09.
CVE-2019-5364HigJun 5, 2019
HPE
Intelligent Management Center (iMC) PLAT
risk 0.57cvss 8.8epss 0.04
A remote code execution vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than version 7.3 E0506P09.
CVE-2019-5363HigJun 5, 2019
HPE
Intelligent Management Center (iMC) PLAT
risk 0.57cvss 8.8epss 0.04
A remote code execution vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than version 7.3 E0506P09.
CVE-2019-5362HigJun 5, 2019
HPE
Intelligent Management Center (iMC) PLAT
risk 0.57cvss 8.8epss 0.04
A remote code execution vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than version 7.3 E0506P09.
CVE-2019-5361HigJun 5, 2019
HPE
Intelligent Management Center (iMC) PLAT
risk 0.57cvss 8.8epss 0.04
A remote code execution vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than version 7.3 E0506P09.
CVE-2019-5360HigJun 5, 2019
HPE
Intelligent Management Center (iMC) PLAT
risk 0.57cvss 8.8epss 0.04
A remote code execution vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than version 7.3 E0506P09.
CVE-2019-5359HigJun 5, 2019
HPE
Intelligent Management Center (iMC) PLAT
risk 0.57cvss 8.8epss 0.04
A remote code execution vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than version 7.3 E0506P09.
CVE-2019-5357HigJun 5, 2019
HPE
Intelligent Management Center (iMC) PLAT
risk 0.57cvss 8.8epss 0.03
A remote code execution vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than version 7.3 E0506P09.
CVE-2019-5354HigJun 5, 2019
HPE
Intelligent Management Center (iMC) PLAT
risk 0.57cvss 8.8epss 0.04
A remote code execution vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than version 7.3 E0506P09.
CVE-2019-5353HigJun 5, 2019
HPE
Intelligent Management Center (iMC) PLAT
risk 0.57cvss 8.8epss 0.04
A remote code execution vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than version 7.3 E0506P09.
CVE-2019-5351HigJun 5, 2019
HPE
Intelligent Management Center (iMC) PLAT
risk 0.57cvss 8.8epss 0.04
A remote code execution vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than version 7.3 E0506P09.
CVE-2019-5349HigJun 5, 2019
HPE
Intelligent Management Center (iMC) PLAT
risk 0.57cvss 8.8epss 0.04
A remote code execution vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than version 7.3 E0506P09.
CVE-2019-5348HigJun 5, 2019
HPE
Intelligent Management Center (iMC) PLAT
risk 0.57cvss 8.8epss 0.04
A remote code execution vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than version 7.3 E0506P09.
CVE-2019-5346HigJun 5, 2019
HPE
Intelligent Management Center (iMC) PLAT
risk 0.57cvss 8.8epss 0.04
A remote code execution vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than version 7.3 E0506P09.
CVE-2019-5345HigJun 5, 2019
HPE
Intelligent Management Center (iMC) PLAT
risk 0.57cvss 8.8epss 0.04
A remote code execution vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than version 7.3 E0506P09.
CVE-2019-5344HigJun 5, 2019
HPE
Intelligent Management Center (iMC) PLAT
risk 0.57cvss 8.8epss 0.04
A remote code execution vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than version 7.3 E0506P09.
CVE-2019-5343HigJun 5, 2019
HPE
Intelligent Management Center (iMC) PLAT
risk 0.57cvss 8.8epss 0.04
A remote code execution vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than version 7.3 E0506P09.
CVE-2019-5342HigJun 5, 2019
HPE
Intelligent Management Center (iMC) PLAT
risk 0.57cvss 8.8epss 0.04
A remote code execution vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than version 7.3 E0506P09.
CVE-2019-5341HigJun 5, 2019
HPE
Intelligent Management Center (iMC) PLAT
risk 0.57cvss 8.8epss 0.03
A remote code execution vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than version 7.3 E0506P09.
CVE-2019-5340HigJun 5, 2019
HPE
Intelligent Management Center (iMC) PLAT
risk 0.57cvss 8.8epss 0.03
A remote code execution vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than version 7.3 E0506P09.
CVE-2019-5339HigJun 5, 2019
HPE
Intelligent Management Center (iMC) PLAT
risk 0.57cvss 8.8epss 0.03
A remote code execution vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than version 7.3 E0506P09.
CVE-2019-5338HigJun 5, 2019
HPE
Intelligent Management Center (iMC) PLAT
risk 0.57cvss 8.8epss 0.03
A remote code execution vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than version 7.3 E0506P09.
CVE-2019-11948HigJun 5, 2019
HPE
Intelligent Management Center (iMC) PLAT
risk 0.57cvss 8.8epss 0.04
A remote code execution vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than version 7.3 E0506P09.
CVE-2019-11947HigJun 5, 2019
HPE
Intelligent Management Center (iMC) PLAT
risk 0.57cvss 8.8epss 0.03
A remote code execution vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than version 7.3 E0506P09.
CVE-2019-11943HigJun 5, 2019
HPE
Intelligent Management Center (iMC) PLAT
risk 0.57cvss 8.8epss 0.04
A remote code execution vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than version 7.3 E0506P09.
CVE-2019-11942HigJun 5, 2019
HPE
Intelligent Management Center (iMC) PLAT
risk 0.57cvss 8.8epss 0.04
A remote code execution vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than version 7.3 E0506P09.
CVE-2019-11941HigJun 5, 2019
HPE
Intelligent Management Center (iMC) PLAT
risk 0.57cvss 8.8epss 0.03
A remote code execution vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than version 7.3 E0506P09.
CVE-2019-11646HigJun 3, 2019
Microfocus
Service Manager
risk 0.57cvss 8.8epss 0.03
Remote unauthorized command execution and unauthorized disclosure of information in Micro Focus Service Manager, versions 9.30, 9.31, 9.32, 9.33, 9.34, 9.35, 9.40, 9.41, 9.50, 9.51, 9.52, 9.60, 9.61. This vulnerability could allow Remote unauthorized command execution and…
CVE-2019-3493HigApr 29, 2019
Microfocus
Network Automation Software
risk 0.57cvss 8.8epss 0.02
A potential security vulnerability has been identified in Micro Focus Network Automation Software 9.20, 9.21, 10.00, 10.10, 10.20, 10.30, 10.40, 10.50, 2018.05, 2018.08, 2018.11, and Micro Focus Network Operations Management (NOM) all versions. The vulnerability could be…
CVE-2018-5921HigOct 3, 2018
Microfocus
printers and MFPs
risk 0.57cvss 8.8epss 0.01
A potential security vulnerability has been identified with certain HP printers and MFPs in 2405129_000052 and other firmware versions. This vulnerability is known as Cross Site Request Forgery, and could potentially be exploited remotely to allow elevation of privilege.
CVE-2018-6504HigSep 20, 2018
Microfocus
Arcsight Management Center
risk 0.57cvss 8.8epss 0.01
A potential Cross-Site Request Forgery (CSRF) vulnerability has been identified in ArcSight Management Center (ArcMC) in all versions prior to 2.81. This vulnerability could be exploited to allow for Cross-Site Request Forgery (CSRF).
CVE-2018-6498HigAug 30, 2018
Microfocus
Hybrid Cloud Management Containerized Suite
risk 0.57cvss 8.8epss 0.03
Remote Code Execution in the following products Hybrid Cloud Management Containerized Suite HCM2017.11, HCM2018.02, HCM2018.05, Operations Bridge Containerized Suite 2017.11, 2018.02, 2018.05, Data Center Automation Containerized Suite 2017.01 until 2018.05, Service Management…
CVE-2018-9023HigJun 18, 2018
Microfocus
Privileged User Manager
risk 0.57cvss 8.8epss 0.02
An input validation vulnerability in CA Privileged Access Manager 2.x allows unprivileged users to execute arbitrary commands by passing specially crafted arguments to the update_crld script.
CVE-2018-6497HigJun 16, 2018
Microfocus
CMS Server
risk 0.57cvss 8.8epss 0.01
Remote Cross-site Request forgery (CSRF) potential has been identified in UCMBD Server version DDM Content Pack V 10.20, 10.21, 10.22, 10.22 CUP7, 10.30, 10.31, 10.32, 10.33, 10.33 CUP2, 11.0 and CMS Server version 2018.05 BACKGROUND which could allow for remote unsafe…
CVE-2018-6496HigJun 16, 2018
Microfocus
UCMBD Browser
risk 0.57cvss 8.8epss 0.01
Remote Cross-site Request forgery (CSRF) potential has been identified in UCMBD Browser version 4.10, 4.11, 4.12, 4.13, 4.14, 4.15, 4.15.1 which could allow for remote unsafe deserialization and cross-site request forgery (CSRF).
CVE-2018-6493HigMay 22, 2018
Microfocus
Network Automation
risk 0.57cvss 8.8epss 0.02
SQL Injection in HP Network Operations Management Ultimate, version 2017.07, 2017.11, 2018.02 and in Network Automation, version 10.00, 10.10, 10.11, 10.20, 10.30, 10.40, 10.50. This vulnerability could be remotely exploited to allow Remote SQL Injection.
CVE-2017-7429HigMar 2, 2018
Microfocus
Edirectory
risk 0.57cvss 8.8epss 0.01
The certificate upload in NetIQ eDirectory PKI plugin before 8.8.8 Patch 10 Hotfix 1 could be abused to upload JSP code which could be used by authenticated attackers to execute JSP applets on the iManager server.
CVE-2017-13982HigSep 30, 2017
HPE
BSM Platform Application Performance Management System Health
risk 0.57cvss 8.8epss 0.03
A directory traversal vulnerability in HPE BSM Platform Application Performance Management System Health product versions 9.26, 9.30 and 9.40, allows users to upload unrestricted files.
CVE-2017-7423HigAug 21, 2017
Microfocus
Enterprise Developer
risk 0.57cvss 8.8epss 0.01
A Cross-Site Request Forgery (CWE-352) vulnerability in esfadmingui in Micro Focus Enterprise Developer and Enterprise Server 2.3, 2.3 Update 1 before Hotfix 8, and 2.3 Update 2 before Hotfix 9 allows remote unauthenticated attackers to forge requests, if this component is…
CVE-2017-5187HigAug 21, 2017
Microfocus
Directory Server
risk 0.57cvss 8.8epss 0.01
A Cross-Site Request Forgery (CWE-352) vulnerability in Directory Server (aka Enterprise Server Administration web UI) in Micro Focus Enterprise Developer and Enterprise Server 2.3 and earlier, 2.3 Update 1 before Hotfix 8, and 2.3 Update 2 before Hotfix 9 allows remote…
CVE-2017-7431HigMay 3, 2017
Novell
Imanager
risk 0.57cvss 8.8epss 0.01
Novell iManager 2.7.x before 2.7 SP7 Patch 10 HF1 and NetIQ iManager 3.x before 3.0.3.1 have persistent CSRF in object management.
CVE-2016-5758HigMar 23, 2017
Microfocus
Access Manager
risk 0.57cvss 8.8epss 0.01
A cross site request forgery protection mechanism in NetIQ Access Manager 4.1 before 4.1.2 Hot Fix 1 and 4.2 before 4.2.2 could be circumvented by repeated uploads causing a high load.
CVE-2016-5750HigMar 23, 2017
Microfocus
Access Manager
risk 0.57cvss 8.8epss 0.01
The certificate upload feature in iManager in NetIQ Access Manager 4.1 before 4.1.2 Hot Fix 1 and 4.2 before 4.2.2 could be used to upload JSP pages that would be executed as the iManager user, allowing code execution by logged-in remote users.
CVE-2016-1597HigMar 23, 2017
Microfocus
Access Governance Suite
risk 0.57cvss 8.8epss 0.01
A logged-in user in NetIQ Access Governance Suite 6.0 through 6.4 could escalate privileges to administrator.
CVE-2016-5387HigJul 19, 2016
Apache
HTTP Server
risk 0.57cvss 8.1epss 0.56
The Apache HTTP Server through 2.4.23 follows RFC 3875 section 4.1.18 and therefore does not protect applications from the presence of untrusted client data in the HTTP_PROXY environment variable, which might allow remote attackers to redirect an application's outbound HTTP…
CVE-2016-5385HigJul 19, 2016
PHP
PHP
risk 0.57cvss 8.1epss 0.50
PHP through 7.0.8 does not attempt to address RFC 3875 section 4.1.18 namespace conflicts and therefore does not protect applications from the presence of untrusted client data in the HTTP_PROXY environment variable, which might allow remote attackers to redirect an…
CVE-2016-4369HigJun 8, 2016
HPE
Discovery and Dependency Mapping Inventory
risk 0.57cvss 8.8epss 0.02
HPE Discovery and Dependency Mapping Inventory (DDMi) 9.30, 9.31, 9.32, 9.32 update 1, 9.32 update 2, and 9.32 update 3 allows remote authenticated users to execute arbitrary commands via a crafted serialized Java object, related to the Apache Commons Collections library.

Page 6 of 44