Micro Focus Vulnerabilities and Affected Products

Products

Service Manager8 vulnerabilities
Micro Focus Enterprise Developer, Micro Focus Enterprise Server7 vulnerabilities
NetIQ Access Manager7 vulnerabilities
Solutions Business Manager7 vulnerabilities
ArcSight Management Center6 vulnerabilities
Solutions Business Manager 11.45 vulnerabilities
ArcSight Logger4 vulnerabilities
Solutions Business Manager (SBM)4 vulnerabilities
Dimensions CM3 vulnerabilities
Filr3 vulnerabilities
HP ArcSight ESM3 vulnerabilities
HP ArcSight ESM Express3 vulnerabilities
Operation Bridge Manager3 vulnerabilities
Application Performance Management2 vulnerabilities
Content Manager2 vulnerabilities
Data Center Automation Containerized Suite2 vulnerabilities
Fortify Software Security Center (SSC)2 vulnerabilities
Hybrid Cloud Management2 vulnerabilities
Hybrid Cloud Management Containerized Suite2 vulnerabilities
Micro Focus ArcSight Logger2 vulnerabilities
Micro Focus NetIQ Self Service Password Reset.2 vulnerabilities
Micro Focus VisiBroker2 vulnerabilities
NetIQ eDirectory 9.1 SP22 vulnerabilities
Network Automation2 vulnerabilities
Network Operations Management (NOM) Suite CDF2 vulnerabilities

Micro Focus vulnerability results
Vulnerability	Title and context	CVSS	EPSS	PoCs	Signals	STIX action
CVE-2018-7682MEDIUM	Micro Focus Solutions Business Manager versions prior to 11.4 allows a user to invoke SBM RESTful services across domains. CWE-532Jun 22, 2018	CVSS6.5v3.0	EPSS0.84%	PoCs0	SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates	STIX
CVE-2018-7681MEDIUM	Micro Focus Solutions Business Manager versions prior to 11.4 allows JavaScript to be embedded in URLs placed in "Favorites" folder. If the user has certain administrative privileges then this vulnerability can impact other users in the system. CWE-79Jun 21, 2018	CVSS4.8v3.0	EPSS0.512%	PoCs0	SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates	STIX
CVE-2018-7680MEDIUM	Micro Focus Solutions Business Manager versions prior to 11.4 can reflect back HTTP header values. CWE-79Jun 21, 2018	CVSS6.1v3.0	EPSS0.647%	PoCs0	SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates	STIX
CVE-2018-7679CRITICAL	Micro Focus Solutions Business Manager versions prior to 11.4 when ASP.NET is configured with execute permission on the virtual directories and does not validate the contents of user avatar images, could lead to remote code execution. CWE-20Jun 21, 2018	CVSS9.8v3.0	EPSS2.31%	PoCs0	SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates	STIX
CVE-2018-7683HIGH	Micro Focus Solutions Business Manager versions prior to 11.4 might reveal certain sensitive information in server log files. CWE-532Jun 21, 2018	CVSS7.5v3.0	EPSS1.11%	PoCs0	SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates	STIX