Skip to content
Noroxi

microfocus records

276 published records for vendor microfocus.

Researcher profile

Entered KEV
2 · 0.7%
Weaponized
13 · 4.7%
Pre-auth RCE
35
With a fix record
12%
Median publish → KEV
245 days

Records by year

  1. 16
  2. 17
  3. 18
  4. 19
  5. 20
  6. 21
  7. 22
  8. 23
  9. 24
  10. 26

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

276 records
  • CVE-2021-22502
    98Now

    Remote Code execution vulnerability in Micro Focus Operation Bridge Reporter (OBR) product, affecting version 10.40.

    CriticalCVSS 9.8KEVWeaponizedEPSS 97%

    microfocus · operation bridge reporterFeb 8, 2021

  • CVE-2021-22506
    68This week

    Advance configuration exposing Information Leakage vulnerability in Micro Focus Access Manager product, affects all versions prior to versio

    HighCVSS 7.5KEVWeaponizedEPSS 26%

    microfocus · access managerMar 26, 2021

  • CVE-2019-5736
    64This week

    runc through 1.0-rc6, as used in Docker before 18.09.2 and other products, allows attackers to overwrite the host runc binary (and consequen

    HighCVSS 8.6WeaponizedEPSS 98%

    docker · dockerFeb 11, 2019

  • CVE-2018-12464
    63This week

    Unauthenticated SQL injection in Micro Focus Secure Messaging Gateway

    CriticalCVSS 9.8WeaponizedEPSS 81%

    microfocus · secure messaging gatewayJun 29, 2018

  • CVE-2020-11854
    61This week

    Arbitrary code execution vlnerability in Operation bridge Manager, Application Performance Management and Operations Bridge (containerized) products.

    CriticalCVSS 9.8WeaponizedEPSS 74%

    microfocus · application performance managementOct 27, 2020

  • CVE-2012-5932
    59Plan

    Eval injection vulnerability in the ldapagnt_eval function in ldapagnt.dll in unifid.exe in NetIQ Privileged User Manager 2.3.x before 2.3.1

    CriticalCVSS 10.0WeaponizedEPSS 63%

    microfocus · privileged user managerDec 24, 2012

  • CVE-2020-11853
    58Plan

    Arbitrary code execution vulnerability on multiple Micro Focus products

    HighCVSS 8.8WeaponizedEPSS 77%

    microfocus · operation bridge managerOct 22, 2020

  • CVE-2012-0432
    58Plan

    Stack-based buffer overflow in the Novell NCP implementation in NetIQ eDirectory 8.8.7.x before 8.8.7.2 allows remote attackers to have an u

    CriticalCVSS 10.0WeaponizedEPSS 59%

    microfocus · edirectoryDec 25, 2012

  • CVE-2016-1606
    53Plan

    Multiple stack-based buffer overflows in COM objects in Micro Focus Rumba 9.4.x before 9.4 HF 13960 allow remote attackers to execute arbitr

    CriticalCVSS 9.8Proof of conceptEPSS 46%

    microfocus · rumbaJul 2, 2016

  • CVE-2018-12465
    52Plan

    Remote Code Execution in Micro Focus Secure Messaging Gateway

    HighCVSS 7.2WeaponizedEPSS 80%

    microfocus · secure messaging gatewayJun 29, 2018

  • CVE-2020-11857
    44Plan

    An Authorization Bypass vulnerability on Micro Focus Operation Bridge Reporter, affecting version 10.40 and earlier.

    CriticalCVSS 9.8WeaponizedEPSS 16%

    microfocus · operation bridge reporterSep 22, 2020

  • CVE-2016-5228
    44Plan

    Stack-based buffer overflow in the PlayMacro function in ObjectXMacro.ObjectXMacro in WdMacCtl.ocx in Micro Focus Rumba 9.x before 9.3 HF 11

    CriticalCVSS 9.8Proof of conceptEPSS 15%

    microfocus · rumbaJul 2, 2016

  • CVE-2015-6946
    43Plan

    Multiple stack-based buffer overflows in the Reprise License Manager service in Borland AccuRev allow remote attackers to execute arbitrary

    CriticalCVSS 9.3No exploitEPSS 21%

    microfocus · accurevSep 15, 2015

  • CVE-2008-7126
    43Plan

    Integer overflow in osagent.exe in Borland VisiBroker Smart Agent 08.00.00.C1.03 and earlier allows remote attackers to cause a denial of se

    CriticalCVSS 10.0Proof of conceptEPSS 10%

    microfocus · visibrokerAug 31, 2009

  • CVE-2009-5153
    41Plan

    In Novell NetWare before 6.5 SP8, a stack buffer overflow in processing of CALLIT RPC calls in the NFS Portmapper daemon in PKERNEL.NLM allo

    CriticalCVSS 9.8No exploitEPSS 6%

    microfocus · netwareNov 21, 2018

  • CVE-2020-11856
    41Plan

    Arbitrary code execution vulnerability on Micro Focus Operation Bridge Reporter, affecting version 10.40 and earlier.

    CriticalCVSS 9.8No exploitEPSS 5%

    microfocus · operation bridge reporterSep 22, 2020

  • CVE-2014-7885
    41Plan

    Multiple unspecified vulnerabilities in HP ArcSight Enterprise Security Manager (ESM) before 6.8c have unknown impact and remote attack vect

    CriticalCVSS 10.0No exploitEPSS 3%

    microfocus · arcsight enterprise security managerMar 13, 2015

  • CVE-2021-22504
    40Plan

    Arbitrary code execution vulnerability on Micro Focus Operations Bridge Manager product, affecting versions 10.1x, 10.6x, 2018.05, 2018.11,

    CriticalCVSS 9.8No exploitEPSS 3%

    microfocus · operations bridge managerFeb 12, 2021

  • CVE-2018-6498
    40Plan

    Micro Focus Container Deployment Foundation (CDF), Remote Code Execution

    CriticalCVSS 9.8No exploitEPSS 3%

    microfocus · data center automationAug 30, 2018

  • CVE-2020-11851
    40Plan

    Arbitrary code execution vulnerability on Micro Focus ArcSight Logger product, affecting all version prior to 7.1.1.

    CriticalCVSS 9.8Proof of conceptEPSS 3%

    microfocus · arcsight loggerNov 16, 2020

  • CVE-2019-3476
    40Plan

    Remote arbitrary code execution in Micro Focus Data Protector, version 10.03 this vulnerability could allow remote arbitrary code execution.

    CriticalCVSS 9.8No exploitEPSS 3%

    microfocus · data protectorMar 25, 2019

  • CVE-2016-9176
    40Plan

    Stack buffer overflow in the send.exe and receive.exe components of Micro Focus Rumba 9.4 and earlier could be used by local attackers or at

    CriticalCVSS 9.8No exploitEPSS 3%

    microfocus · rumbaNov 3, 2016

  • CVE-2017-7420
    40Plan

    An Authentication Bypass (CWE-287) vulnerability in ESMAC (aka Enterprise Server Monitor and Control) in Micro Focus Enterprise Developer an

    CriticalCVSS 9.8No exploitEPSS 2%

    microfocus · enterprise developerAug 21, 2017

  • CVE-2018-6499
    40Plan

    Remote Code Execution in the following products Hybrid Cloud Management Containerized Suite HCM2017.11, HCM2018.02, HCM2018.05, Operations B

    CriticalCVSS 9.8No exploitEPSS 2%

    microfocus · data center automationAug 30, 2018

  • CVE-2018-7679
    40Plan

    Micro Focus Solutions Business Manager versions prior to 11.4 when ASP.NET is configured with execute permission on the virtual directories

    CriticalCVSS 9.8No exploitEPSS 2%

    microfocus · solutions business managerJun 21, 2018