Log in Start free

Micro Focus

Products

ProductCVEsExploitedLatest
NetIQ Access Manager6–May 2, 2022
ArcSight Logger3–Nov 17, 2020
Operation Bridge Manager3–Oct 27, 2020
Dimensions CM3–Jul 19, 2023
Operation Bridge (containerized)2–Oct 27, 2020
Hybrid Cloud Management2–Oct 22, 2020
Application Performance Management2–Oct 27, 2020
Micro Focus ArcSight Logger2–Aug 31, 2022
Data Center Automation Containerized1–May 29, 2020
Enterprise Developer1–Jul 20, 2023
Enterprise Server1–Jul 20, 2023
Enterprise Test Server1–Jul 20, 2023
Filr1–Nov 17, 2020
Identity Intelligence. versions1–May 29, 2020
IDOL1–Nov 17, 2020
Micro Focus Filr 1–Nov 21, 2022
Micro Focus GroupWise Web1–Dec 16, 2022
Micro Focus Operations Bridge- Containerized1–Dec 8, 2022
Micro Focus Operations Bridge Manager1–Dec 8, 2022
NetIQ Advanced Authentication1–Jul 12, 2021
NetIQ Identity Manager1–Jan 24, 2023
NetIQ iManager1–Jan 25, 2023
Network Operation Management1–May 29, 2020
Operation Bridge Suite (Containerized)1–May 29, 2020
Operations Bridge (containerized)1–Oct 22, 2020
Service Management Automation1–Oct 22, 2020
Service Management Automation (SMA)1–May 29, 2020
Universal CMDB1–Oct 22, 2020
Visual COBOL1–Jul 20, 2023
ZENworks Asset Management1–Dec 23, 2022
ZENworks Configuration Management (ZCM)1–Dec 23, 2022
ZENworks Endpoint Security Management (ZESM)1–Dec 23, 2022
Advanced Authentication1–Apr 12, 2021
ZENworks Patch Management (ZPM)1–Dec 23, 2022
ArcSight ESM (when ArcSight Fusion1–May 29, 2020
ArcSight Interset1–May 29, 2020
ArcSight Investigate. versions1–May 29, 2020
ArcSight Management Center1–Dec 9, 2023
ArcSight Transformation Hub1–May 29, 2020
COBOL Server1–Jul 20, 2023
Data Center Automation1–Oct 22, 2020

Exploited and recent CVEs

  • CVE-2020-25835 Medium 5.9 Micro Focus ArcSight Management Center Remote Vulnerability 0.4%
  • CVE-2023-32265 High 7.1 Mitigations and availability of updates relating to security vulnerability in ESCWA component CVE-2023-32265. 0.5%
  • CVE-2023-32265 High 7.1 Mitigations and availability of updates relating to security vulnerability in ESCWA component CVE-2023-32265. 0.5%
  • CVE-2023-32265 High 7.1 Mitigations and availability of updates relating to security vulnerability in ESCWA component CVE-2023-32265. 0.5%
  • CVE-2023-32265 High 7.1 Mitigations and availability of updates relating to security vulnerability in ESCWA component CVE-2023-32265. 0.5%
  • CVE-2023-32265 High 7.1 Mitigations and availability of updates relating to security vulnerability in ESCWA component CVE-2023-32265. 0.5%
  • CVE-2023-32263 Low 2.6 Dimensions CM Plugin for Jenkins 0.8.17 – 0.9.3 0.3%
  • CVE-2023-32262 Medium 4.3 Dimensions CM Plugin for Jenkins 0.8.17 – 0.9.3 0.8%
  • CVE-2023-32261 Medium 4.2 Dimensions CM Plugin for Jenkins 0.8.17 – 0.9.3 0.6%
  • CVE-2022-38758 High 7.2 XSS vulnerabilities in iManager 0.5%
  • CVE-2022-26329 Low 1.8 File existence disclosue vulnerability in IDM plugin 0.5%
  • CVE-2022-38757 High 7.2 CVE-2022-38757 ZENworks 0.9%
  • CVE-2022-38757 High 7.2 CVE-2022-38757 ZENworks 0.9%
  • CVE-2022-38757 High 7.2 CVE-2022-38757 ZENworks 0.9%
  • CVE-2022-38757 High 7.2 CVE-2022-38757 ZENworks 0.9%
  • CVE-2022-38756 Medium 4.3 CVE-2022-38756 vulnerability in GW Web prior to 18.4.2 0.9%
  • CVE-2022-38754 High 8.0 CVE-2022-38754 - Micro Focus Operations Bridge Manager and OpsBridge Containerized - Cross Site Scripting (XSS) 0.7%
  • CVE-2022-38754 High 8.0 CVE-2022-38754 - Micro Focus Operations Bridge Manager and OpsBridge Containerized - Cross Site Scripting (XSS) 0.7%
  • CVE-2022-38755 Medium 5.3 Filr Remote unauthenticated user enumeration for versions prior to 4.3.1.1 0.7%
  • CVE-2022-26331 Medium 6.1 Potential vulnerabilities have been identified in Micro Focus ArcSight Logger. The vulnerabilities could be remotely exploited resulting in Self Cross-Site Scripting (XSS). 0.5%
  • CVE-2022-26330 Medium 6.5 Potential vulnerability has been identified in Micro Focus ArcSight Logger. The vulnerability could be remotely exploited resulting in Information Disclosure. 0.7%
  • CVE-2022-26326 Medium 4.0 Potential open redirection vulnerability in NetIQ Access Manager versions prior to version 5.0.2 0.4%
  • CVE-2022-26325 Low 2.9 Cross Site Scripting vulnerability in NetIQ Access Manager versions prior to version 5.0.2 0.4%
  • CVE-2021-22526 Medium 4.9 Open Redirection vulnerability in NetIQ Access Manager versions prior to version 4.5.4 and 5.0.1 0.5%
  • CVE-2021-22524 Medium 5.4 Denial of service vulnerability in NetIQ Access Manager versions prior to version 4.5.4 and 5.0.1 0.7%
  • CVE-2021-22527 Medium 6.0 Information leakage vulnerability in NetIQ Access Manager versions prior to version 4.5.4 and 5.0.1 0.7%
  • CVE-2021-22528 High 8.0 Information leakage vulnerability in NetIQ Access Manager versions prior to version 4.5.4 and 5.0.1 0.6%
  • CVE-2021-22515 Medium 4.8 Multi-Factor Authentication (MFA) downgrade exposure in NetIQ Advanced Authentication Server 0.7%
  • CVE-2021-22497 Low 3.8 Advanced Authentication Improper Session Management 0.8%
  • CVE-2020-25833 Unrated Persistent cross-Site Scripting vulnerability on Micro Focus IDOL product, affecting all version prior to version 12.7. The vulnerability could be exploited to perform Persistent XSS attack. 0.5%