Vendor
Micro Focus
127 known vulnerabilities in products by Micro Focus, 0 of them actively exploited (CISA KEV).
Key figures
127
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
28
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2018-12464 | Unauthenticated SQL injection in Micro Focus Secure Messaging Gateway | 10.0 | |
| Critical | CVE-2020-11854 | Micro Focus Application Performance Management: Code Execution | 9.8 | |
| Critical | CVE-2017-14803 | Micro Focus NetIQ Access Manager: Code Execution | 9.8 | |
| Critical | CVE-2018-12465 | Remote Code Execution in Micro Focus Secure Messaging Gateway | 9.1 | |
| High | CVE-2020-11853 | Arbitrary code execution vulnerability on multiple Micro Focus products | 8.8 | |
| Critical | CVE-2017-8994 | Micro Focus HPE Operations Orchestration: security vulnerability | 9.8 | |
| Critical | CVE-2017-14350 | Micro Focus HPE Application Performance Management (APM): Code Execution | 9.8 | |
| Critical | CVE-2018-12463 | MFSBGN03811 rev.1 - Fortify Software Security Center (SSC), Multiple vulnerabilities | 7.3 | |
| Critical | CVE-2020-11851 | Micro Focus ArcSight Logger: Code Execution | 9.8 | |
| Critical | CVE-2016-9176 | Micro Focus Rumba 9.4: Stack-Based Buffer Overflow | 9.8 | |
| Critical | CVE-2017-7420 | Microfocus Enterprise Developer: Improper Authentication | 9.8 | |
| Critical | CVE-2018-6498 | Micro Focus Container Deployment Foundation (CDF), Remote Code Execution | 8.8 | |
| Critical | CVE-2011-0469 | Micro Focus openSUSE: Code Injection | 9.8 | |
| Medium | CVE-2019-3474 | Path traversal vulnerability in Filr web application | 6.5 | |
| High | CVE-2018-18593 | MFSBGN03838 rev.1 - UCMDB Configuration Management Service, Multiple Vulnerabilities | 6.5 | |
| Critical | CVE-2018-7679 | Micro Focus Solutions Business Manager 11.4: Remote Code Execution | 9.8 | |
| Medium | CVE-2018-7690 | MFSBGN03835 rev.1 - Fortify Software Security Center (SSC), Remote Unauthorized Access | 6.5 | |
| Medium | CVE-2018-7691 | MFSBGN03835 rev.1 - Fortify Software Security Center (SSC), Remote Unauthorized Access | 6.5 | |
| High | CVE-2018-6500 | Micro Focus ArcSight Management Center: Path Traversal | 7.5 | |
| Critical | CVE-2020-11844 | Micro Focus Hybrid Cloud Management: Incorrect Authorization | 10.0 | |
| Critical | CVE-2019-11652 | Micro Focus Self Service Password Reset (SSPR): security vulnerability | 9.8 | |
| High | CVE-2019-11654 | A path traversal vulnerability has been identified in Verastream Host Integrator | 8.6 | |
| Critical | CVE-2018-12468 | Arbitrary File Upload in GroupWise Administration Console | 9.1 | |
| Critical | CVE-2018-6487 | MFSBGN03799 rev.1 - Micro Focus UCMDB, Remote Disclosure of Information | 9.8 | |
| Critical | CVE-2017-14356 | Micro Focus HP ArcSight ESM: SQL Injection | 9.8 |