Skip to content
CVE Tracker

Every public CVE, as it is published

The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read just now.

At a glance

Published CVEs; rejected ones are not counted.

  • 400,040All CVEsplus 18,873 rejected
  • 732Last 24 hours3,248 in the last 7 days
  • 17,396Last 30 days1,557 of them critical
  • 1,766Known exploitedin the CISA KEV catalog

CVEs published per year

All time, by publication date in UTC; follows the filter above.

  • Critical
  • High
  • Medium
  • Low
  • Not scored
The numbers of every bucket are in the table under the chart.
Show the numbers as a table
Matching CVEs per period and severity, newest first
PeriodCriticalHighMediumLowNot scoredTotalCumulative
2026000000436
2025000000436
2024000000436
2023110103436
202212102015433
202179192037418
2020811191039381
2019421274056342
2018123755180122286
20171832371088164
2016172521206576
201504130811
20140030033

Latest CVEs

436 CVEs, newest first

CVEs, newest first
Title
CVE-2023-24468
Broken access control in Advanced Authentication versions prior to 6.4.1.1 and 6.3.7.2NetIQ Advanced Authentication
Critical9.8
CVE-2022-38758
XSS vulnerabilities in iManagerMicro Focus · NetIQ iManager
High7.2
CVE-2022-26329
File existence disclosue vulnerability in IDM pluginMicro Focus · NetIQ Identity Manager
Low1.8
CVE-2022-38757
CVE-2022-38757 ZENworksMicro Focus · ZENworks Configuration Management (ZCM)
High7.2
CVE-2022-38756
CVE-2022-38756 vulnerability in GW Web prior to 18.4.2Micro Focus · Micro Focus GroupWise Web
Medium4.3
CVE-2022-38754
CVE-2022-38754 - Micro Focus Operations Bridge Manager and OpsBridge Containerized - Cross Site Scripting (XSS)Micro Focus · Micro Focus Operations Bridge Manager
High8.0
CVE-2022-38753
This update resolves a multi-factor authentication bypass attackNetIQ Advanced Authentication
Medium6.3
CVE-2022-38755
Filr Remote unauthenticated user enumeration for versions prior to 4.3.1.1Micro Focus · Micro Focus Filr
Medium5.3
CVE-2022-26331
Potential vulnerabilities have been identified in Micro Focus ArcSight Logger. The vulnerabilities could be remotely exploited resulting in Self Cross-Site Scripting (XSS).Micro Focus · Micro Focus ArcSight Logger
Medium6.1
CVE-2022-26330
Potential vulnerability has been identified in Micro Focus ArcSight Logger. The vulnerability could be remotely exploited resulting in Information Disclosure.Micro Focus · Micro Focus ArcSight Logger
Medium6.5
CVE-2021-22531
A bug exist in the input parameter of Access Manager that allows supply of invalid character to trigger cross-site scripting vulnerability. This affects NetIQ…NetIQ Access Manager
Medium6.1
CVE-2022-26326
Potential open redirection vulnerability in NetIQ Access Manager versions prior to version 5.0.2Micro Focus · NetIQ Access Manager
Medium4.0
CVE-2022-26325
Cross Site Scripting vulnerability in NetIQ Access Manager versions prior to version 5.0.2Micro Focus · NetIQ Access Manager
Low2.9
CVE-2021-38125
Unauthenticated remote code execution in Micro Focus Operations Bridge containerized, affecting versions 2021.05, 2021.08, and newer versions of Micro Focus…Operations Bridge containerized.
Critical9.8
CVE-2021-38130
A potential Information leakage vulnerability has been identified in versions of Micro Focus Voltage SecureMail Mail Relay prior to 7.3.0.1. The vulnerability…Voltage SecureMail Mail Relay.
Medium6.5
CVE-2021-38129
Escalation of privileges vulnerability in Micro Focus in Micro Focus Operations Agent, affecting versions 12.x up to and including 12.21. The vulnerability…Micro Focus Operations Agent.
Low3.3
CVE-2021-38127
Potential vulnerabilities have been identified in Micro Focus ArcSight Enterprise Security Manager, affecting versions 7.4.x and 7.5.x. The vulnerabilities…ArcSight Enterprise Security Manager (ESM)
Medium6.1
CVE-2021-38126
Potential vulnerabilities have been identified in Micro Focus ArcSight Enterprise Security Manager, affecting versions 7.4.x and 7.5.x. The vulnerabilities…ArcSight Enterprise Security Manager (ESM)
Medium6.1
CVE-2021-38124
Remote Code Execution vulnerability in Micro Focus ArcSight Enterprise Security Manager (ESM) product, affecting versions 7.0.2 through 7.5. The vulnerability…ArcSight Enterprise Security Manager (ESM).
Critical9.8
CVE-2021-22535
Unauthorized information security disclosure vulnerability on Micro Focus Directory and Resource Administrator (DRA) product, affecting all DRA versions prior…Directory and Resource Administrator (DRA)
Medium4.9
CVE-2021-22526
Open Redirection vulnerability in NetIQ Access Manager versions prior to version 4.5.4 and 5.0.1Micro Focus · NetIQ Access Manager
Medium4.9
CVE-2021-22524
Denial of service vulnerability in NetIQ Access Manager versions prior to version 4.5.4 and 5.0.1Micro Focus · NetIQ Access Manager
Medium5.4
CVE-2021-22527
Information leakage vulnerability in NetIQ Access Manager versions prior to version 4.5.4 and 5.0.1Micro Focus · NetIQ Access Manager
Medium6.0
CVE-2021-22528
Information leakage vulnerability in NetIQ Access Manager versions prior to version 4.5.4 and 5.0.1Micro Focus · NetIQ Access Manager
High8.0
CVE-2021-38123
Open Redirect vulnerability in Micro Focus Network Automation, affecting Network Automation versions 10.4x, 10.5x, 2018.05, 2018.11, 2019.05, 2020.02, 2020.08,…Network Automation.
Medium6.1
CVE-2021-22525
This release addresses a potential information leakage vulnerability in NetIQ Access Manager versions prior to 5.0.1NetIQ Access Manager versions prior to 5.0.1
Medium5.5
CVE-2021-22517
A potential unauthorized privilege escalation vulnerability has been identified in Micro Focus Data Protector. The vulnerability affects versions 10.10, 10.20,…Data Protector
High8.8
CVE-2021-22521
A privileged escalation vulnerability has been identified in Micro Focus ZENworks Configuration Management, affecting version 2020 Update 1 and all prior…ZENworks Configuration Management
Medium6.7
CVE-2021-22523
XML External Entity vulnerability in Micro Focus Verastream Host Integrator, affecting version 7.8 Update 1 and earlier versions. The vulnerability could allow…Verastream Host Integrator.
High7.6
CVE-2021-22522
Reflected Cross-Site Scripting vulnerability in Micro Focus Verastream Host Integrator, affecting version version 7.8 Update 1 and earlier versions. The…Verastream Host Integrator.
High7.1
CVE-2021-22515
Multi-Factor Authentication (MFA) downgrade exposure in NetIQ Advanced Authentication ServerMicro Focus · NetIQ Advanced Authentication
Medium4.8
CVE-2021-22516
Insertion of Sensitive Information into Log File vulnerability in Micro Focus Secure API Manager (SAPIM) product, affecting version 2.0.0. The vulnerability…Secure API Manager (SAPIM).
High7.5
CVE-2021-22519
Execute arbitrary code vulnerability in Micro Focus SiteScope product, affecting versions 11.40,11.41 , 2018.05(11.50), 2018.08(11.51), 2018.11(11.60),…SiteScope
Critical9.8
CVE-2021-22514
An arbitrary code execution vulnerability exists in Micro Focus Application Performance Management, affecting versions 9.40, 9.50 and 9.51. The vulnerability…Application Performance Management (APM)
Critical9.8
CVE-2021-22505
Escalation of privileges vulnerability in Micro Focus Operations Agent, affects versions 12.0x, 12.10, 12.11, 12.12, 12.14 and 12.15. The vulnerability could…Operations Agent
Critical9.8
CVE-2021-22497
Advanced Authentication Improper Session ManagementMicro Focus · Advanced Authentication
Low3.8
CVE-2021-22512
Cross-Site Request Forgery (CSRF) vulnerability in Micro Focus Application Automation Tools Plugin - Jenkins plugin. The vulnerability affects version 6.7 and…Micro Focus Application Automation Tools Plugin - Jenkins plugin
Medium6.5
CVE-2021-22511
Improper Certificate Validation vulnerability in Micro Focus Application Automation Tools Plugin - Jenkins plugin. The vulnerability affects version 6.7 and…Micro Focus Application Automation Tools Plugin - Jenkins plugin.
Medium6.5
CVE-2021-22510
Reflected XSS vulnerability in Micro Focus Application Automation Tools Plugin - Jenkins plugin. The vulnerability affects all version 6.7 and earlier versions.Micro Focus Application Automation Tools Plugin - Jenkins plugin
Medium6.1
CVE-2021-22513
Missing Authorization vulnerability in Micro Focus Application Automation Tools Plugin - Jenkins plugin. The vulnerability affects version 6.7 and earlier…Micro Focus Application Automation Tools Plugin - Jenkins plugin.
Medium6.5
CVE-2021-22507
Authentication bypass vulnerability in Micro Focus Operations Bridge Manager affects versions 2019.05, 2019.11, 2020.05 and 2020.10. The vulnerability could…Operations Bridge Manager
Critical9.8
CVE-2020-25840
Cross-Site scripting vulnerability in Micro Focus Access Manager product, affects all version prior to version 5.0. The vulnerability could cause configuration…Access Manager.
Medium6.1
CVE-2021-22506
Advance configuration exposing Information Leakage vulnerability in Micro Focus Access Manager product, affects all versions prior to version 5.0. The…ExploitedAccess Manager.
High7.5
CVE-2021-22496
Authentication Bypass Vulnerability in Micro Focus Access Manager Product, affects all version prior to version 4.5.3.3. The vulnerability could cause…Access Manager
High7.5
CVE-2019-18943
XML External Entity processingMicro Focus · Solutions Business Manager
Medium6.1
CVE-2019-18942
Stored cross site scriptingMicro Focus · Solutions Business Manager
Medium5.5
CVE-2019-18944
Micro Focus Solutions Business Manager Application Repository versions prior to 11.7.1 are vulnerable to reflected XSS.Micro Focus · Solutions Business Manager
Medium4.9
CVE-2019-18945
privilege escalationMicro Focus · Solutions Business Manager
High7.3
CVE-2019-18947
information disclosureMicro Focus · Solutions Business Manager
Low3.5
CVE-2019-18946
Session fixationMicro Focus · Solutions Business Manager
Medium4.8