Micro Focus Vulnerabilities and Affected Products - Exploit Intel

Skip to content

Products

Service Manager8 vulnerabilities
Micro Focus Enterprise Developer, Micro Focus Enterprise Server7 vulnerabilities
NetIQ Access Manager7 vulnerabilities
Solutions Business Manager7 vulnerabilities
ArcSight Management Center6 vulnerabilities
Solutions Business Manager 11.45 vulnerabilities
ArcSight Logger4 vulnerabilities
Solutions Business Manager (SBM)4 vulnerabilities
Dimensions CM3 vulnerabilities
Filr3 vulnerabilities
HP ArcSight ESM3 vulnerabilities
HP ArcSight ESM Express3 vulnerabilities
Operation Bridge Manager3 vulnerabilities
Application Performance Management2 vulnerabilities
Content Manager2 vulnerabilities
Data Center Automation Containerized Suite2 vulnerabilities
Fortify Software Security Center (SSC)2 vulnerabilities
Hybrid Cloud Management2 vulnerabilities
Hybrid Cloud Management Containerized Suite2 vulnerabilities
Micro Focus ArcSight Logger2 vulnerabilities
Micro Focus NetIQ Self Service Password Reset.2 vulnerabilities
Micro Focus VisiBroker2 vulnerabilities
NetIQ eDirectory 9.1 SP22 vulnerabilities
Network Automation2 vulnerabilities
Network Operations Management (NOM) Suite CDF2 vulnerabilities

Micro Focus vulnerability results
Vulnerability	Title and context	CVSS	EPSS	PoCs	Signals	STIX action
CVE-2019-11648HIGH	An information leakage exists in Micro Focus NetIQ Self Service Password Reset Software all versions prior to version 4.4. The vulnerability could be exploited to expose sensitive information. CWE-200Jun 24, 2019	CVSS7.5v3.0	EPSS1.11%	PoCs0	SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates	STIX
CVE-2019-11647MEDIUM	A potential XSS exists in Self Service Password Reset, in Micro Focus NetIQ Software all versions prior to version 4.4. The vulnerability could be exploited to enable an XSS attack. CWE-79Jun 24, 2019	CVSS6.1v3.0	EPSS0.647%	PoCs0	SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates	STIX