Micro Focus Vulnerabilities and Affected Products
Vulnerabilities associated with acutoweb.
Products
Clear product- Service Manager8 vulnerabilities
- Micro Focus Enterprise Developer, Micro Focus Enterprise Server7 vulnerabilities
- NetIQ Access Manager7 vulnerabilities
- Solutions Business Manager7 vulnerabilities
- ArcSight Management Center6 vulnerabilities
- Solutions Business Manager 11.45 vulnerabilities
- ArcSight Logger4 vulnerabilities
- Solutions Business Manager (SBM)4 vulnerabilities
- Dimensions CM3 vulnerabilities
- Filr3 vulnerabilities
- HP ArcSight ESM3 vulnerabilities
- HP ArcSight ESM Express3 vulnerabilities
- Operation Bridge Manager3 vulnerabilities
- Application Performance Management2 vulnerabilities
- Content Manager2 vulnerabilities
- Data Center Automation Containerized Suite2 vulnerabilities
- Fortify Software Security Center (SSC)2 vulnerabilities
- Hybrid Cloud Management2 vulnerabilities
- Hybrid Cloud Management Containerized Suite2 vulnerabilities
- Micro Focus ArcSight Logger2 vulnerabilities
- Micro Focus NetIQ Self Service Password Reset.2 vulnerabilities
- Micro Focus VisiBroker2 vulnerabilities
- NetIQ eDirectory 9.1 SP22 vulnerabilities
- Network Automation2 vulnerabilities
- Network Operations Management (NOM) Suite CDF2 vulnerabilities
| Vulnerability | Title and context | CVSS | EPSS | PoCs | Signals | STIX action |
|---|---|---|---|---|---|---|
CVE-2024-42852MEDIUM | Micro Focus acutoweb Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Cross Site Scripting vulnerability in AcuToWeb server v.10.5.0.7577C8b allows a remote attacker to execute arbitrary code via the index.php component. | CVSS6.1v3.1 | EPSS0.775% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware use1 Nuclei template | STIX |