Micro Focus vulnerabilities
127 published CVEs name Micro Focus among the affected products.
- Published CVEs
- 127
- Last 12 months
- 0
- Critical
- 21
- Known exploited
- 0
Critical 21High 39Medium 62Low 5Not scored 0
CVEs per yearBy the year they were published
- 20161
- 20171
- 201820
- 201946
- 20216
- 202129
- 20234
- 202310
- 202310
Newest CVEs
- CVE-2020-25835
Micro Focus ArcSight Management Center Remote Vulnerability
Micro Focus · ArcSight Management Center
Medium5.9 - CVE-2023-32265
Mitigations and availability of updates relating to security vulnerability in ESCWA component CVE-2023-32265.
Micro Focus · Enterprise Server
High7.1 - CVE-2023-32263
Dimensions CM Plugin for Jenkins 0.8.17 – 0.9.3
Micro Focus · Dimensions CM
Low2.6 - CVE-2023-32262
Dimensions CM Plugin for Jenkins 0.8.17 – 0.9.3
Micro Focus · Dimensions CM
Medium4.3 - CVE-2023-32261
Dimensions CM Plugin for Jenkins 0.8.17 – 0.9.3
Micro Focus · Dimensions CM
Medium4.2 - CVE-2022-38758
XSS vulnerabilities in iManager
Micro Focus · NetIQ iManager
High7.2 - CVE-2022-26329
File existence disclosue vulnerability in IDM plugin
Micro Focus · NetIQ Identity Manager
Low1.8 - CVE-2022-38757
CVE-2022-38757 ZENworks
Micro Focus · ZENworks Configuration Management (ZCM)
High7.2 - CVE-2022-38756
CVE-2022-38756 vulnerability in GW Web prior to 18.4.2
Micro Focus · Micro Focus GroupWise Web
Medium4.3 - CVE-2022-38754
CVE-2022-38754 - Micro Focus Operations Bridge Manager and OpsBridge Containerized - Cross Site Scripting (XSS)
Micro Focus · Micro Focus Operations Bridge Manager
High8.0
Products with the most CVEs
Most common weaknesses
- CWE-79 Cross-site scripting (XSS)29
- CWE-200 Exposure of sensitive information9
- CWE-22 Path traversal6
- CWE-352 Cross-site request forgery (CSRF)6
- CWE-94 Code injection6
- CWE-601 Open redirect5
- CWE-20 Improper input validation4
- CWE-502 Deserialization of untrusted data4
- CWE-863 Incorrect authorization4
- CWE-89 SQL injection4