https://vulnogram.org/ Most recent CVEs assigned by microfocus (microfocus). https://vulnogram.org/seaview/icons/microfocus.png https://vulnogram.org/ Wed, 21 Oct 2026 07:00:07 GMT https://vulnogram.org/CVE-2023-24468 https://vulnogram.org/CVE-2023-24468 Broken access control in Advanced Authentication versions prior to 6.4.1.1 and 6.3.7.2 Wed, 15 Mar 2023 00:00:00 GMT https://vulnogram.org/CVE-2022-38758 https://vulnogram.org/CVE-2022-38758 Cross-site Scripting (XSS) vulnerability in NetIQ iManager prior to version 3.2.6 allows attacker to execute malicious scripts on the user's browser. This issue affects: Micro Focus NetIQ iManager NetIQ iManager versions prior to 3.2.6 on ALL. High Wed, 25 Jan 2023 00:00:00 GMT https://vulnogram.org/CVE-2022-26329 https://vulnogram.org/CVE-2022-26329 File existence disclosure vulnerability in NetIQ Identity Manager plugin prior to version 4.8.5 allows attacker to determine whether a file exists on the filesystem. This issue affects: Micro Focus NetIQ Identity Manager NetIQ Identity Manager versio… Low Tue, 24 Jan 2023 00:00:00 GMT https://vulnogram.org/CVE-2022-38757 https://vulnogram.org/CVE-2022-38757 A vulnerability has been identified in Micro Focus ZENworks 2020 Update 3a and prior versions. This vulnerability allows administrators with rights to perform actions (e.g., install a bundle) on a set of managed devices, to be able to exercise these… High Fri, 23 Dec 2022 00:00:00 GMT https://vulnogram.org/CVE-2022-38756 https://vulnogram.org/CVE-2022-38756 A vulnerability has been identified in Micro Focus GroupWise Web in versions prior to 18.4.2. The GW Web component makes a request to the Post Office Agent that contains sensitive information in the query parameters that could be logged by any interv… Medium Network Exploitable Fri, 16 Dec 2022 00:00:00 GMT https://vulnogram.org/CVE-2022-38754 https://vulnogram.org/CVE-2022-38754 A potential vulnerability has been identified in Micro Focus Operations Bridge - Containerized. The vulnerability could be exploited by a malicious authenticated OBM (Operations Bridge Manager) user to run Java Scripts in the browser context of anoth… High Thu, 08 Dec 2022 00:00:00 GMT https://vulnogram.org/CVE-2022-38753 https://vulnogram.org/CVE-2022-38753 This update resolves a multi-factor authentication bypass attack Medium Mon, 28 Nov 2022 00:00:00 GMT https://vulnogram.org/CVE-2022-38755 https://vulnogram.org/CVE-2022-38755 A vulnerability has been identified in Micro Focus Filr in versions prior to 4.3.1.1. The vulnerability could be exploited to allow a remote unauthenticated attacker to enumerate valid users of the system. Remote unauthenticated user enumeration. Thi… Medium Network Exploitable Mon, 21 Nov 2022 00:00:00 GMT https://vulnogram.org/CVE-2022-26331 https://vulnogram.org/CVE-2022-26331 Potential vulnerabilities have been identified in Micro Focus ArcSight Logger. The vulnerabilities could be remotely exploited resulting in Information Disclosure, or Self Cross-Site Scripting (XSS). This issue affects: Micro Focus ArcSight Logger ve… Medium Network Exploitable Wed, 31 Aug 2022 15:52:37 GMT https://vulnogram.org/CVE-2022-26330 https://vulnogram.org/CVE-2022-26330 Potential vulnerabilities have been identified in Micro Focus ArcSight Logger. The vulnerabilities could be remotely exploited resulting in Information Disclosure, or Self Cross-Site Scripting (XSS). This issue affects: Micro Focus ArcSight Logger ve… Medium Wed, 31 Aug 2022 15:52:15 GMT https://vulnogram.org/CVE-2021-22531 https://vulnogram.org/CVE-2021-22531 A bug exist in the input parameter of Access Manager that allows supply of invalid character to trigger cross-site scripting vulnerability. This affects NetIQ Access Manager 4.5 and 5.0 Thu, 12 May 2022 18:52:38 GMT https://vulnogram.org/CVE-2022-26326 https://vulnogram.org/CVE-2022-26326 Potential open redirection vulnerability when URL is crafted in specific format in NetIQ Access Manager prior to 5.0.2 Medium Mon, 02 May 2022 18:43:42 GMT https://vulnogram.org/CVE-2022-26325 https://vulnogram.org/CVE-2022-26325 Reflected Cross Site Scripting (XSS) vulnerability in NetIQ Access Manager prior to 5.0.2 Low Mon, 02 May 2022 18:41:42 GMT https://vulnogram.org/CVE-2021-38125 https://vulnogram.org/CVE-2021-38125 Unauthenticated remote code execution in Micro Focus Operations Bridge containerized, affecting versions 2021.05, 2021.08, and newer versions of Micro Focus Operations Bridge containerized if the deployment was upgraded from 2021.05 or 2021.08. The v… Mon, 11 Apr 2022 19:37:49 GMT https://vulnogram.org/CVE-2021-38130 https://vulnogram.org/CVE-2021-38130 A potential Information leakage vulnerability has been identified in versions of Micro Focus Voltage SecureMail Mail Relay prior to 7.3.0.1. The vulnerability could be exploited to create an information leakage attack. Fri, 04 Feb 2022 22:29:22 GMT https://vulnogram.org/CVE-2021-38129 https://vulnogram.org/CVE-2021-38129 Escalation of privileges vulnerability in Micro Focus in Micro Focus Operations Agent, affecting versions 12.x up to and including 12.21. The vulnerability could be exploited by a non-privileged local user to access system monitoring data collected b… Tue, 25 Jan 2022 19:11:07 GMT https://vulnogram.org/CVE-2021-38127 https://vulnogram.org/CVE-2021-38127 Potential vulnerabilities have been identified in Micro Focus ArcSight Enterprise Security Manager, affecting versions 7.4.x and 7.5.x. The vulnerabilities could be remotely exploited resulting in Cross-Site Scripting (XSS). Fri, 14 Jan 2022 19:11:33 GMT https://vulnogram.org/CVE-2021-38126 https://vulnogram.org/CVE-2021-38126 Potential vulnerabilities have been identified in Micro Focus ArcSight Enterprise Security Manager, affecting versions 7.4.x and 7.5.x. The vulnerabilities could be remotely exploited resulting in Cross-Site Scripting (XSS). Fri, 14 Jan 2022 19:11:32 GMT https://vulnogram.org/CVE-2021-38124 https://vulnogram.org/CVE-2021-38124 Remote Code Execution vulnerability in Micro Focus ArcSight Enterprise Security Manager (ESM) product, affecting versions 7.0.2 through 7.5. The vulnerability could be exploited resulting in remote code execution. Tue, 28 Sep 2021 13:56:04 GMT https://vulnogram.org/CVE-2021-22535 https://vulnogram.org/CVE-2021-22535 Unauthorized information security disclosure vulnerability on Micro Focus Directory and Resource Administrator (DRA) product, affecting all DRA versions prior to 10.1 Patch 1. The vulnerability could lead to unauthorized information disclosure. Tue, 28 Sep 2021 13:54:45 GMT https://vulnogram.org/CVE-2021-22526 https://vulnogram.org/CVE-2021-22526 Open Redirection vulnerability in NetIQ Access Manager prior to 5.0.1 and 4.5.4 Medium Mon, 13 Sep 2021 12:00:50 GMT https://vulnogram.org/CVE-2021-22524 https://vulnogram.org/CVE-2021-22524 Injection attack caused the denial of service vulnerability in NetIQ Access Manager prior to 5.0.1 and 4.5.4 Medium Mon, 13 Sep 2021 11:58:31 GMT https://vulnogram.org/CVE-2021-22527 https://vulnogram.org/CVE-2021-22527 Information leakage vulnerability in NetIQ Access Manager prior to 5.0.1 and 4.5.4 Medium Mon, 13 Sep 2021 11:56:22 GMT https://vulnogram.org/CVE-2021-22528 https://vulnogram.org/CVE-2021-22528 Reflected Cross Site Scripting (XSS) vulnerability in NetIQ Access Manager prior to 5.0.1 and 4.5.4 High Mon, 13 Sep 2021 11:42:07 GMT https://vulnogram.org/CVE-2021-38123 https://vulnogram.org/CVE-2021-38123 Open Redirect vulnerability in Micro Focus Network Automation, affecting Network Automation versions 10.4x, 10.5x, 2018.05, 2018.11, 2019.05, 2020.02, 2020.08, 2020.11, 2021.05. The vulnerability could allow redirect users to malicious websites after… Tue, 07 Sep 2021 16:48:24 GMT https://vulnogram.org/CVE-2021-22525 https://vulnogram.org/CVE-2021-22525 This release addresses a potential information leakage vulnerability in NetIQ Access Manager versions prior to 5.0.1 Thu, 02 Sep 2021 16:56:41 GMT https://vulnogram.org/CVE-2021-22517 https://vulnogram.org/CVE-2021-22517 A potential unauthorized privilege escalation vulnerability has been identified in Micro Focus Data Protector. The vulnerability affects versions 10.10, 10.20, 10.30, 10.40, 10.50, 10.60, 10.70, 10.80, 10.0 and 10.91. A privileged user may potentiall… Thu, 05 Aug 2021 20:41:05 GMT https://vulnogram.org/CVE-2021-22521 https://vulnogram.org/CVE-2021-22521 A privileged escalation vulnerability has been identified in Micro Focus ZENworks Configuration Management, affecting version 2020 Update 1 and all prior versions. The vulnerability could be exploited to gain unauthorized system privileges. Fri, 30 Jul 2021 20:21:28 GMT https://vulnogram.org/CVE-2021-22523 https://vulnogram.org/CVE-2021-22523 XML External Entity vulnerability in Micro Focus Verastream Host Integrator, affecting version 7.8 Update 1 and earlier versions. The vulnerability could allow the control of web browser and hijacking user sessions. Thu, 22 Jul 2021 11:11:26 GMT https://vulnogram.org/CVE-2021-22522 https://vulnogram.org/CVE-2021-22522 Reflected Cross-Site Scripting vulnerability in Micro Focus Verastream Host Integrator, affecting version version 7.8 Update 1 and earlier versions. The vulnerability could allow disclosure of confidential data. Thu, 22 Jul 2021 11:08:03 GMT https://vulnogram.org/CVE-2021-22515 https://vulnogram.org/CVE-2021-22515 Multi-Factor Authentication (MFA) functionality can be bypassed, allowing the use of single factor authentication in NetIQ Advanced Authentication versions prior to 6.3 SP4 Patch 1. Medium Mon, 12 Jul 2021 10:04:15 GMT https://vulnogram.org/CVE-2021-22516 https://vulnogram.org/CVE-2021-22516 Insertion of Sensitive Information into Log File vulnerability in Micro Focus Secure API Manager (SAPIM) product, affecting version 2.0.0. The vulnerability could lead to sensitive information being in a log file. Fri, 04 Jun 2021 12:05:37 GMT https://vulnogram.org/CVE-2021-22519 https://vulnogram.org/CVE-2021-22519 Execute arbitrary code vulnerability in Micro Focus SiteScope product, affecting versions 11.40,11.41 , 2018.05(11.50), 2018.08(11.51), 2018.11(11.60), 2019.02(11.70), 2019.05(11.80), 2019.08(11.90), 2019.11(11.91), 2020.05(11.92), 2020.10(11.93). Th… Fri, 28 May 2021 19:22:04 GMT https://vulnogram.org/CVE-2021-22514 https://vulnogram.org/CVE-2021-22514 An arbitrary code execution vulnerability exists in Micro Focus Application Performance Management, affecting versions 9.40, 9.50 and 9.51. The vulnerability could allow remote attackers to execute arbitrary code on affected installations of APM. Wed, 28 Apr 2021 11:06:28 GMT https://vulnogram.org/CVE-2021-22505 https://vulnogram.org/CVE-2021-22505 Escalation of privileges vulnerability in Micro Focus Operations Agent, affects versions 12.0x, 12.10, 12.11, 12.12, 12.14 and 12.15. The vulnerability could be exploited to escalate privileges and execute code under the account of the Operations Age… Tue, 13 Apr 2021 13:54:27 GMT https://vulnogram.org/CVE-2021-22497 https://vulnogram.org/CVE-2021-22497 Advanced Authentication versions prior to 6.3 SP4 have a potential broken authentication due to improper session management issue. Low Mon, 12 Apr 2021 20:53:20 GMT https://vulnogram.org/CVE-2021-22512 https://vulnogram.org/CVE-2021-22512 Cross-Site Request Forgery (CSRF) vulnerability in Micro Focus Application Automation Tools Plugin - Jenkins plugin. The vulnerability affects version 6.7 and earlier versions. The vulnerability could allow form validation without permission checks. Thu, 08 Apr 2021 21:29:39 GMT https://vulnogram.org/CVE-2021-22511 https://vulnogram.org/CVE-2021-22511 Improper Certificate Validation vulnerability in Micro Focus Application Automation Tools Plugin - Jenkins plugin. The vulnerability affects version 6.7 and earlier versions. The vulnerability could allow unconditionally disabling of SSL/TLS certific… Thu, 08 Apr 2021 21:27:24 GMT https://vulnogram.org/CVE-2021-22510 https://vulnogram.org/CVE-2021-22510 Reflected XSS vulnerability in Micro Focus Application Automation Tools Plugin - Jenkins plugin. The vulnerability affects all version 6.7 and earlier versions. Thu, 08 Apr 2021 21:25:29 GMT https://vulnogram.org/CVE-2021-22513 https://vulnogram.org/CVE-2021-22513 Missing Authorization vulnerability in Micro Focus Application Automation Tools Plugin - Jenkins plugin. The vulnerability affects version 6.7 and earlier versions. The vulnerability could allow access without permission checks. Thu, 08 Apr 2021 21:16:58 GMT https://vulnogram.org/CVE-2021-22507 https://vulnogram.org/CVE-2021-22507 Authentication bypass vulnerability in Micro Focus Operations Bridge Manager affects versions 2019.05, 2019.11, 2020.05 and 2020.10. The vulnerability could allow remote attackers to bypass user authentication and get unauthorized access. Thu, 08 Apr 2021 17:35:08 GMT https://vulnogram.org/CVE-2020-25840 https://vulnogram.org/CVE-2020-25840 Cross-Site scripting vulnerability in Micro Focus Access Manager product, affects all version prior to version 5.0. The vulnerability could cause configuration destruction. Fri, 26 Mar 2021 13:41:51 GMT https://vulnogram.org/CVE-2021-22506 https://vulnogram.org/CVE-2021-22506 Advance configuration exposing Information Leakage vulnerability in Micro Focus Access Manager product, affects all versions prior to version 5.0. The vulnerability could cause information leakage. High Known Exploited Network Exploitable Fri, 26 Mar 2021 13:37:22 GMT https://vulnogram.org/CVE-2021-22496 https://vulnogram.org/CVE-2021-22496 Authentication Bypass Vulnerability in Micro Focus Access Manager Product, affects all version prior to version 4.5.3.3. The vulnerability could cause information leakage. Thu, 25 Mar 2021 15:56:32 GMT https://vulnogram.org/CVE-2019-18943 https://vulnogram.org/CVE-2019-18943 Micro Focus Solutions Business Manager versions prior to 11.7.1 are vulnerable to XML External Entity Processing (XXE) on certain operations. Medium Fri, 26 Feb 2021 03:32:59 GMT https://vulnogram.org/CVE-2019-18942 https://vulnogram.org/CVE-2019-18942 Micro Focus Solutions Business Manager versions prior to 11.7.1 are vulnerable to stored XSS. The application reflects previously stored user input without encoding. Medium Fri, 26 Feb 2021 03:30:59 GMT https://vulnogram.org/CVE-2019-18944 https://vulnogram.org/CVE-2019-18944 Micro Focus Solutions Business Manager Application Repository versions prior to 11.7.1 are vulnerable to reflected XSS. Medium Fri, 26 Feb 2021 03:28:07 GMT https://vulnogram.org/CVE-2019-18945 https://vulnogram.org/CVE-2019-18945 Micro Focus Solutions Business Manager Application Repository versions prior to 11.7.1 are vulnerable to privilege escalation vulnerability. High Fri, 26 Feb 2021 03:12:06 GMT https://vulnogram.org/CVE-2019-18947 https://vulnogram.org/CVE-2019-18947 Micro Focus Solutions Business Manager Application Repository versions prior to 11.7.1 are vulnerable to information disclosure. Low Fri, 26 Feb 2021 03:07:45 GMT https://vulnogram.org/CVE-2019-18946 https://vulnogram.org/CVE-2019-18946 Micro Focus Solutions Business Manager Application Repository versions prior to 11.7.1 are vulnerable to session fixation. Medium Fri, 26 Feb 2021 03:04:38 GMT