Micro Focus Vulnerabilities and Affected Products
Vulnerabilities associated with Solutions Business Manager.
Products
Clear product- Service Manager8 vulnerabilities
- Micro Focus Enterprise Developer, Micro Focus Enterprise Server7 vulnerabilities
- NetIQ Access Manager7 vulnerabilities
- Solutions Business Manager7 vulnerabilities
- ArcSight Management Center6 vulnerabilities
- Solutions Business Manager 11.45 vulnerabilities
- ArcSight Logger4 vulnerabilities
- Solutions Business Manager (SBM)4 vulnerabilities
- Dimensions CM3 vulnerabilities
- Filr3 vulnerabilities
- HP ArcSight ESM3 vulnerabilities
- HP ArcSight ESM Express3 vulnerabilities
- Operation Bridge Manager3 vulnerabilities
- Application Performance Management2 vulnerabilities
- Content Manager2 vulnerabilities
- Data Center Automation Containerized Suite2 vulnerabilities
- Fortify Software Security Center (SSC)2 vulnerabilities
- Hybrid Cloud Management2 vulnerabilities
- Hybrid Cloud Management Containerized Suite2 vulnerabilities
- Micro Focus ArcSight Logger2 vulnerabilities
- Micro Focus NetIQ Self Service Password Reset.2 vulnerabilities
- Micro Focus VisiBroker2 vulnerabilities
- NetIQ eDirectory 9.1 SP22 vulnerabilities
- Network Automation2 vulnerabilities
- Network Operations Management (NOM) Suite CDF2 vulnerabilities
| Vulnerability | Title and context | CVSS | EPSS | PoCs | Signals | STIX action |
|---|---|---|---|---|---|---|
CVE-2019-18943MEDIUM | XML External Entity processingMicro Focus Solutions Business Manager versions prior to 11.7.1 are vulnerable to XML External Entity Processing (XXE) on certain operations. CWE-611Feb 26, 2021 | CVSS6.1v3.1 | EPSS0.347% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2019-18942MEDIUM | Stored cross site scriptingMicro Focus Solutions Business Manager versions prior to 11.7.1 are vulnerable to stored XSS. The application reflects previously stored user input without encoding. CWE-79Feb 26, 2021 | CVSS5.5v3.1 | EPSS0.305% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2019-18944MEDIUM | Micro Focus Solutions Business Manager Application Repository versions prior to 11.7.1 are vulnerable to reflected XSS. | CVSS4.9v3.1 | EPSS0.305% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2019-18945HIGH | privilege escalationMicro Focus Solutions Business Manager Application Repository versions prior to 11.7.1 are vulnerable to privilege escalation vulnerability. | CVSS7.3v3.1 | EPSS0.312% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
information disclosureMicro Focus Solutions Business Manager Application Repository versions prior to 11.7.1 are vulnerable to information disclosure. | CVSS3.5v3.1 | EPSS0.329% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX | |
CVE-2019-18946MEDIUM | Session fixationMicro Focus Solutions Business Manager Application Repository versions prior to 11.7.1 are vulnerable to session fixation. CWE-384Feb 26, 2021 | CVSS4.8v3.1 | EPSS0.255% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2019-3477MEDIUM | Micro Focus Solution Business Manager versions prior to 11.4.2 is susceptible to open redirect. CWE-601Jun 7, 2019 | CVSS6.1v3.0 | EPSS0.648% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |