CVE-2020-25835Micro Focus ArcSight Management Center Remote Vulnerability Exploitation status Not confirmed Fix YesAffected product A ArcSight Management Center Published 12/09/2023 Severity Medium CVE-2023-32265Mitigations and availability of updates relating to security vulnerability in ESCWA component CVE-2023-32265. Exploitation status Not known exploited Fix YesAffected product E Enterprise Server Published 07/20/2023 Severity High CVE-2023-32263Dimensions CM Plugin for Jenkins 0.8.17 – 0.9.3 Exploitation status Not known exploited Fix YesAffected product D Dimensions CM Published 07/19/2023 Severity Low CVE-2023-32262Dimensions CM Plugin for Jenkins 0.8.17 – 0.9.3 Exploitation status Not known exploited Fix YesAffected product D Dimensions CM Published 07/19/2023 Severity Medium CVE-2023-32261Dimensions CM Plugin for Jenkins 0.8.17 – 0.9.3 Exploitation status Not known exploited Fix YesAffected product D Dimensions CM Published 07/19/2023 Severity Medium CVE-2022-38758XSS vulnerabilities in iManager Exploitation status Not known exploited Fix YesAffected product N NetIQ iManager Published 01/25/2023 Severity High CVE-2022-26329File existence disclosue vulnerability in IDM plugin Exploitation status Not known exploited Fix YesAffected product N NetIQ Identity Manager Published 01/24/2023 Severity Low CVE-2022-38757CVE-2022-38757 ZENworks Exploitation status Not known exploited Fix YesAffected product Z ZENworks Configuration Management (ZCM) Published 12/23/2022 Severity High CVE-2022-38756CVE-2022-38756 vulnerability in GW Web prior to 18.4.2 Exploitation status Public exploit Fix YesAffected product M Micro Focus GroupWise Web Published 12/16/2022 Severity Medium CVE-2022-38754CVE-2022-38754 - Micro Focus Operations Bridge Manager and OpsBridge Containerized - Cross Site Scripting (XSS) Exploitation status Not known exploited Fix YesAffected product M Micro Focus Operations Bridge Manager Published 12/08/2022 Severity High CVE-2022-38755Filr Remote unauthenticated user enumeration for versions prior to 4.3.1.1 Exploitation status Not known exploited Fix YesAffected product M Micro Focus Filr Published 11/21/2022 Severity Medium CVE-2022-26331Potential vulnerabilities have been identified in Micro Focus ArcSight Logger. The vulnerabilities could be remotely exploited resulting in Self Cross-Site Scripting (XSS). Exploitation status Not confirmed Fix YesAffected product M Micro Focus ArcSight Logger Published 08/31/2022 Severity Medium CVE-2022-26330Potential vulnerability has been identified in Micro Focus ArcSight Logger. The vulnerability could be remotely exploited resulting in Information Disclosure. Exploitation status Not confirmed Fix YesAffected product M Micro Focus ArcSight Logger Published 08/31/2022 Severity Medium CVE-2022-26326Potential open redirection vulnerability in NetIQ Access Manager versions prior to version 5.0.2 Exploitation status Not confirmed Fix YesAffected product N NetIQ Access Manager Published 05/02/2022 Severity Medium CVE-2022-26325Cross Site Scripting vulnerability in NetIQ Access Manager versions prior to version 5.0.2 Exploitation status Not confirmed Fix YesAffected product N NetIQ Access Manager Published 05/02/2022 Severity Low CVE-2021-22526Open Redirection vulnerability in NetIQ Access Manager versions prior to version 4.5.4 and 5.0.1 Exploitation status Not confirmed Fix YesAffected product N NetIQ Access Manager Published 09/13/2021 Severity Medium CVE-2021-22524Denial of service vulnerability in NetIQ Access Manager versions prior to version 4.5.4 and 5.0.1 Exploitation status Not confirmed Fix YesAffected product N NetIQ Access Manager Published 09/13/2021 Severity Medium CVE-2021-22527Information leakage vulnerability in NetIQ Access Manager versions prior to version 4.5.4 and 5.0.1 Exploitation status Not confirmed Fix YesAffected product N NetIQ Access Manager Published 09/13/2021 Severity Medium CVE-2021-22528Information leakage vulnerability in NetIQ Access Manager versions prior to version 4.5.4 and 5.0.1 Exploitation status Not confirmed Fix YesAffected product N NetIQ Access Manager Published 09/13/2021 Severity High CVE-2021-22515Multi-Factor Authentication (MFA) downgrade exposure in NetIQ Advanced Authentication Server Exploitation status Not confirmed Fix YesAffected product N NetIQ Advanced Authentication Published 07/12/2021 Severity Medium CVE-2021-22497Advanced Authentication Improper Session Management Exploitation status Not confirmed Fix YesAffected product A Advanced Authentication Published 04/12/2021 Severity Low CVE-2019-18943XML External Entity processing Exploitation status Not confirmed Fix YesAffected product S Solutions Business Manager Published 02/26/2021 Severity Medium CVE-2019-18942Stored cross site scripting Exploitation status Not confirmed Fix YesAffected product S Solutions Business Manager Published 02/26/2021 Severity Medium CVE-2019-18944CVE-2019-18944 Exploitation status Not confirmed Fix YesAffected product S Solutions Business Manager Published 02/26/2021 Severity Medium CVE-2019-18945privilege escalation Exploitation status Not confirmed Fix YesAffected product S Solutions Business Manager Published 02/26/2021 Severity High CVE-2019-18947information disclosure Exploitation status Not confirmed Fix YesAffected product S Solutions Business Manager Published 02/26/2021 Severity Low CVE-2019-18946Session fixation Exploitation status Not confirmed Fix YesAffected product S Solutions Business Manager Published 02/26/2021 Severity Medium CVE-2020-25833CVE-2020-25833 Exploitation status Not confirmed Fix Not confirmed Affected product I IDOL Published 11/17/2020 Severity Unknown CVE-2020-25832CVE-2020-25832 Exploitation status Not confirmed Fix Not confirmed Affected product F Filr Published 11/17/2020 Severity Unknown CVE-2020-11851CVE-2020-11851 Exploitation status Not confirmed Fix Not confirmed Affected product A ArcSight Logger Published 11/17/2020 Severity Unknown CVE-2020-11860CVE-2020-11860 Exploitation status Not confirmed Fix Not confirmed Affected product A ArcSight Logger Published 11/17/2020 Severity Unknown CVE-2020-25834CVE-2020-25834 Exploitation status Not confirmed Fix Not confirmed Affected product A ArcSight Logger Published 11/17/2020 Severity Unknown CVE-2020-11858Code execution with escalated privilegesn vlnerability in Operation bridge Manager and Operations Bridge (containerized) products. Exploitation status Not confirmed Fix YesAffected product O Operation Bridge (containerized) Published 10/27/2020 Severity High CVE-2020-11854Arbitrary code execution vlnerability in Operation bridge Manager, Application Performance Management and Operations Bridge (containerized) products. Exploitation status Not confirmed Fix YesAffected product A Application Performance Management Published 10/27/2020 Severity Critical CVE-2020-11853Arbitrary code execution vulnerability on multiple Micro Focus products Exploitation status Not confirmed Fix YesAffected product O Operation Bridge Manager Published 10/22/2020 Severity High CVE-2020-11844Incorrect Authorization vulnerability in the Micro Focus Container Deployment Foundation affecting multiple products. Exploitation status Not confirmed Fix YesAffected product H Hybrid Cloud Management Published 05/29/2020 Severity Critical CVE-2019-11662CVE-2019-11662 Exploitation status Not confirmed Fix Not confirmed Affected product S Service Manager Published 09/18/2019 Severity Unknown CVE-2019-11661CVE-2019-11661 Exploitation status Not confirmed Fix Not confirmed Affected product S Service Manager Published 09/18/2019 Severity Unknown CVE-2019-11664CVE-2019-11664 Exploitation status Not confirmed Fix Not confirmed Affected product S Service Manager Published 09/18/2019 Severity Unknown CVE-2019-11663CVE-2019-11663 Exploitation status Not confirmed Fix Not confirmed Affected product S Service Manager Published 09/18/2019 Severity Unknown CVE-2019-11665CVE-2019-11665 Exploitation status Not confirmed Fix Not confirmed Affected product S Service Manager Published 09/17/2019 Severity Unknown CVE-2019-11666CVE-2019-11666 Exploitation status Not confirmed Fix Not confirmed Affected product S Service Manager Published 09/17/2019 Severity Unknown CVE-2019-11667CVE-2019-11667 Exploitation status Not confirmed Fix Not confirmed Affected product S Service Manager Published 09/17/2019 Severity Unknown CVE-2019-11669CVE-2019-11669 Exploitation status Not confirmed Fix Not confirmed Affected product S Service Manager Published 09/10/2019 Severity Unknown CVE-2019-11658CVE-2019-11658 Exploitation status Not confirmed Fix Not confirmed Affected product C Content Manager Published 08/29/2019 Severity Unknown CVE-2019-11654A path traversal vulnerability has been identified in Verastream Host Integrator Exploitation status Not confirmed Fix YesAffected product V Verastream Host Integrator Published 08/23/2019 Severity High CVE-2019-11652CVE-2019-11652 Exploitation status Not confirmed Fix Not confirmed Affected product S Self Service Password Reset (SSPR) Published 08/14/2019 Severity Unknown CVE-2019-11653CVE-2019-11653 Exploitation status Not confirmed Fix Not confirmed Affected product C Content Manager Published 08/07/2019 Severity Unknown CVE-2019-3486ArcSight Security Management Center stored cross site script issue in version prior to 2.9.1 Exploitation status Not confirmed Fix YesAffected product A Arcsight Security Management Center Published 07/25/2019 Severity Medium CVE-2019-3485ArcSight Logger stored cross site script issue in version prior to 6.7.1 Exploitation status Not confirmed Fix YesAffected product A ArcSight Logger Published 07/24/2019 Severity Medium CVE-2019-11650CVE-2019-11650 Exploitation status Not confirmed Fix Not confirmed Affected product N NetIQ Advanced Authentication Framework Published 07/10/2019 Severity Unknown CVE-2019-11648CVE-2019-11648 Exploitation status Not confirmed Fix Not confirmed Affected product M Micro Focus NetIQ Self Service Password Reset. Published 06/24/2019 Severity Unknown CVE-2019-11647CVE-2019-11647 Exploitation status Not confirmed Fix Not confirmed Affected product M Micro Focus NetIQ Self Service Password Reset. Published 06/24/2019 Severity Unknown CVE-2019-11649KM03461174 Micro Focus Fortify Software Security Center Server, CVE-2019-11649 Exploitation status Not confirmed Fix Not confirmed Affected product M Micro Focus Fortify Software Security Center Server Published 06/19/2019 Severity Medium CVE-2019-3477CVE-2019-3477 Exploitation status Not confirmed Fix Not confirmed Affected product S Solutions Business Manager Published 06/07/2019 Severity Unknown CVE-2019-3493CVE-2019-3493 Exploitation status Not confirmed Fix Not confirmed Affected product M Micro Focus Network Automation and Micro Focus Network Operations Management (NOM) Published 04/29/2019 Severity Unknown CVE-2019-3489CVE-2019-3489 Exploitation status Not confirmed Fix Not confirmed Affected product M Micro Focus Content Manager Published 04/01/2019 Severity Unknown CVE-2018-19643Solutions Business Manager (SBM) Information Leakage issue in version prior to 11.5 Exploitation status Not confirmed Fix YesAffected product S Solutions Business Manager (SBM) Published 03/27/2019 Severity Medium CVE-2018-19644Solutions Business Manager (SBM) reflected cross site script issue in version prior to 11.5 Exploitation status Not confirmed Fix YesAffected product S Solutions Business Manager (SBM) Published 03/27/2019 Severity Medium CVE-2018-19642Solutions Business Manager (SBM) Denial of Service issue in version prior to 11.5 Exploitation status Not confirmed Fix YesAffected product S Solutions Business Manager (SBM) Published 03/27/2019 Severity Medium CVE-2018-19641Solutions Business Manager (SBM) Unauthenticated remote code execution issue in version prior to 11.5 Exploitation status Not confirmed Fix YesAffected product S Solutions Business Manager (SBM) Published 03/27/2019 Severity Medium CVE-2019-3474Path traversal vulnerability in Filr web application Exploitation status Public exploit Fix YesAffected product F Filr Published 02/20/2019 Severity Medium CVE-2019-3475Local privilege escalation in Filr famtd Exploitation status Public exploit Fix YesAffected product F Filr Published 02/20/2019 Severity High CVE-2018-18593MFSBGN03838 rev.1 - UCMDB Configuration Management Service, Multiple Vulnerabilities Exploitation status Not confirmed Fix Not confirmed Affected product U UCMDB Configuration Management Service Published 12/31/2018 Severity Medium CVE-2018-7690MFSBGN03835 rev.1 - Fortify Software Security Center (SSC), Remote Unauthorized Access Exploitation status Public exploit Fix Not confirmed Affected product F Fortify Software Security Center (SSC) Published 12/13/2018 Severity Medium CVE-2018-7691MFSBGN03835 rev.1 - Fortify Software Security Center (SSC), Remote Unauthorized Access Exploitation status Public exploit Fix Not confirmed Affected product F Fortify Software Security Center (SSC) Published 12/13/2018 Severity Medium CVE-2018-17950CVE-2018-17950 Exploitation status Not confirmed Fix Not confirmed Affected product N NetIQ eDirectory 9.1 SP2 Published 12/12/2018 Severity Unknown CVE-2018-17952CVE-2018-17952 Exploitation status Not confirmed Fix Not confirmed Affected product N NetIQ eDirectory 9.1 SP2 Published 12/12/2018 Severity Unknown CVE-2018-17949CVE-2018-17949 Exploitation status Not confirmed Fix Not confirmed Affected product N NetIQ iManager 3.1 SP2 Published 12/12/2018 Severity Unknown CVE-2018-18591MFSBGN03823 rev.1 - Micro Focus Service Manager, unauthorized disclosure of data Exploitation status Not confirmed Fix Not confirmed Affected product M Micro Focus Service Manager Published 11/13/2018 Severity Medium CVE-2018-18590MFSBGN03829 rev.1 - Micro Focus Operation Bridge Containerized Suite, Remote Code Execution Exploitation status Not confirmed Fix Not confirmed Affected product O Operation Bridge Containerized Suite Published 11/07/2018 Severity Critical CVE-2018-18589MFSBGN03827 rev.1 - Microfocus Real User Monitoring 9.4.0 BPRDownload Java Deserialization Vulnerability Exploitation status Not confirmed Fix Not confirmed Affected product M Microfocus Real User Monitoring Published 10/23/2018 Severity Medium CVE-2018-12469CVE-2018-12469 Exploitation status Not confirmed Fix Not confirmed Affected product M Micro Focus Enterprise Developer, Micro Focus Enterprise Server Published 10/12/2018 Severity Unknown CVE-2018-6504MFSBGN03824 rev.1 - ArcSight Management Center, Insufficient Access Control, Reflected Cross Site Scripting, Access Control vulnerability, Cross-Site Request Forgery (CSRF), Unauthenticated File Download, Directory Traversal Vulnerability Exploitation status Not confirmed Fix Not confirmed Affected product A ArcSight Management Center Published 09/20/2018 Severity High CVE-2018-6502MFSBGN03824 rev.1 - ArcSight Management Center, Insufficient Access Control, Reflected Cross Site Scripting, Access Control vulnerability, Cross-Site Request Forgery (CSRF), Unauthenticated File Download, Directory Traversal Vulnerability Exploitation status Not confirmed Fix Not confirmed Affected product A ArcSight Management Center Published 09/20/2018 Severity Medium CVE-2018-6503MFSBGN03824 rev.1 - ArcSight Management Center, Insufficient Access Control, Reflected Cross Site Scripting, Access Control vulnerability, Cross-Site Request Forgery (CSRF), Unauthenticated File Download, Directory Traversal Vulnerability Exploitation status Not confirmed Fix Not confirmed Affected product A ArcSight Management Center Published 09/20/2018 Severity Medium CVE-2018-6505MFSBGN03824 rev.1 - ArcSight Management Center, Insufficient Access Control, Reflected Cross Site Scripting, Access Control vulnerability, Cross-Site Request Forgery (CSRF), Unauthenticated File Download, Directory Traversal Vulnerability Exploitation status Not confirmed Fix Not confirmed Affected product A ArcSight Management Center Published 09/20/2018 Severity High CVE-2018-6500MFSBGN03824 rev.1 - ArcSight Management Center, Insufficient Access Control, Reflected Cross Site Scripting, Access Control vulnerability, Cross-Site Request Forgery (CSRF), Unauthenticated File Download, Directory Traversal Vulnerability Exploitation status Not confirmed Fix Not confirmed Affected product A ArcSight Management Center Published 09/20/2018 Severity High CVE-2018-6499CVE-2018-6499 Exploitation status Not confirmed Fix Not confirmed Affected product N Network Operations Management (NOM) Suite CDF Published 08/30/2018 Severity High CVE-2018-6498Micro Focus Container Deployment Foundation (CDF), Remote Code Execution Exploitation status Not confirmed Fix Not confirmed Affected product N Network Operations Management (NOM) Suite CDF Published 08/30/2018 Severity High CVE-2018-7686CVE-2018-7686 Exploitation status Not confirmed Fix Not confirmed Affected product E eDirectory (ZDI) Published 08/09/2018 Severity Unknown CVE-2018-7692CVE-2018-7692 Exploitation status Not confirmed Fix Not confirmed Affected product N NetIQ eDirectory Versions prior to 9.1.1 HF1 Published 08/09/2018 Severity Unknown CVE-2018-12468Arbitrary File Upload in GroupWise Administration Console Exploitation status Not confirmed Fix YesAffected product G GroupWise Published 08/01/2018 Severity Critical CVE-2018-12463MFSBGN03811 rev.1 - Fortify Software Security Center (SSC), Multiple vulnerabilities Exploitation status Public exploit Fix Not confirmed Affected product F Fortify Software Security Center Published 07/12/2018 Severity High CVE-2018-12464Unauthenticated SQL injection in Micro Focus Secure Messaging Gateway Exploitation status Public exploit Fix YesAffected product S Secure Messaging Gateway Published 06/29/2018 Severity Critical CVE-2018-12465Remote Code Execution in Micro Focus Secure Messaging Gateway Exploitation status Public exploit Fix YesAffected product S Secure Messaging Gateway Published 06/29/2018 Severity Critical CVE-2018-7682CVE-2018-7682 Exploitation status Not confirmed Fix Not confirmed Affected product S Solutions Business Manager 11.4 Published 06/22/2018 Severity Unknown CVE-2018-7683CVE-2018-7683 Exploitation status Not confirmed Fix Not confirmed Affected product S Solutions Business Manager 11.4 Published 06/21/2018 Severity Unknown CVE-2018-7679CVE-2018-7679 Exploitation status Not confirmed Fix Not confirmed Affected product S Solutions Business Manager 11.4 Published 06/21/2018 Severity Unknown CVE-2018-7681CVE-2018-7681 Exploitation status Not confirmed Fix Not confirmed Affected product S Solutions Business Manager 11.4 Published 06/21/2018 Severity Unknown CVE-2018-7680CVE-2018-7680 Exploitation status Not confirmed Fix Not confirmed Affected product S Solutions Business Manager 11.4 Published 06/21/2018 Severity Unknown CVE-2018-6497MFSBGN03810 rev.1 - Universal CMDB, Deserialization Java Objects and CSRF Exploitation status Not confirmed Fix Not confirmed Affected product U Universal CMDB Server Published 06/15/2018 Severity High CVE-2018-6496MFSBGN03809 rev.1 - Universal CMDB, Deserialization Java Objects and CSRF Exploitation status Not confirmed Fix Not confirmed Affected product U UCMDB Browser Published 06/15/2018 Severity High CVE-2018-6495MFSBGN03808 rev.1 - Micro Focus UCMDB, Cross-Site Scripting Exploitation status Not confirmed Fix Not confirmed Affected product U UCMDB Published 05/23/2018 Severity Medium CVE-2018-6492MFSBGN03806 rev.1 - HP Network Automation Software, Network Operations Management (NOM) Suite, Multiple Vulnerabilities Exploitation status Not confirmed Fix Not confirmed Affected product N Network Operations Management Ultimate Published 05/22/2018 Severity Medium CVE-2018-6493MFSBGN03806 rev.1 - HP Network Automation Software, Network Operations Management (NOM) Suite, Multiple Vulnerabilities Exploitation status Not confirmed Fix Not confirmed Affected product N Network Operations Management Ultimate Published 05/22/2018 Severity High CVE-2018-6494MFSBGN03807 rev.1 - HP Service Manager Software, Multiple Vulnerabilities Exploitation status Not confirmed Fix Not confirmed Affected product H HP Service Manager Software Published 05/22/2018 Severity Medium CVE-2018-7687Client for OES Elevation of Privilege via Buffer Overflow Exploitation status Not confirmed Fix YesAffected product C Client for Open Enterprise Server Published 05/21/2018 Severity High CVE-2018-6491MFSBGN03803 rev.1 - UCMDB, Installation File Access Control Privilege Escalation Vulnerability Exploitation status Not confirmed Fix Not confirmed Affected product U Universal CMDB Published 04/23/2018 Severity High CVE-2018-1343CVE-2018-1343 Exploitation status Not confirmed Fix Not confirmed Affected product N NetIQ Privileged Account Manager (PAM) 3.1 and 3.2 Published 03/06/2018 Severity Unknown