İçeriğe atla
Noroxi

microfocus kayıtları

microfocus üreticisine ait 276 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
2 · %0,7
Silahlaştırılmış
13 · %4,7
Pre-auth RCE
35
Düzeltme kaydı olan
%12
Yayından KEV’e ortanca
245 gün

Yıllara göre kayıt

  1. 16
  2. 17
  3. 18
  4. 19
  5. 20
  6. 21
  7. 22
  8. 23
  9. 24
  10. 26

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

276 kayıt
  • CVE-2021-22502
    98Hemen

    Remote Code execution vulnerability in Micro Focus Operation Bridge Reporter (OBR) product, affecting version 10.40.

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %97

    microfocus · operation bridge reporter8 Şub 2021

  • CVE-2021-22506
    68Bu hafta

    Advance configuration exposing Information Leakage vulnerability in Micro Focus Access Manager product, affects all versions prior to versio

    YüksekCVSS 7,5KEVSilahlaştırılmışEPSS %26

    microfocus · access manager26 Mar 2021

  • CVE-2019-5736
    64Bu hafta

    runc through 1.0-rc6, as used in Docker before 18.09.2 and other products, allows attackers to overwrite the host runc binary (and consequen

    YüksekCVSS 8,6SilahlaştırılmışEPSS %98

    docker · docker11 Şub 2019

  • CVE-2018-12464
    63Bu hafta

    Unauthenticated SQL injection in Micro Focus Secure Messaging Gateway

    KritikCVSS 9,8SilahlaştırılmışEPSS %81

    microfocus · secure messaging gateway29 Haz 2018

  • CVE-2020-11854
    61Bu hafta

    Arbitrary code execution vlnerability in Operation bridge Manager, Application Performance Management and Operations Bridge (containerized) products.

    KritikCVSS 9,8SilahlaştırılmışEPSS %74

    microfocus · application performance management27 Eki 2020

  • CVE-2012-5932
    59Planlayın

    Eval injection vulnerability in the ldapagnt_eval function in ldapagnt.dll in unifid.exe in NetIQ Privileged User Manager 2.3.x before 2.3.1

    KritikCVSS 10,0SilahlaştırılmışEPSS %63

    microfocus · privileged user manager24 Ara 2012

  • CVE-2020-11853
    58Planlayın

    Arbitrary code execution vulnerability on multiple Micro Focus products

    YüksekCVSS 8,8SilahlaştırılmışEPSS %77

    microfocus · operation bridge manager22 Eki 2020

  • CVE-2012-0432
    58Planlayın

    Stack-based buffer overflow in the Novell NCP implementation in NetIQ eDirectory 8.8.7.x before 8.8.7.2 allows remote attackers to have an u

    KritikCVSS 10,0SilahlaştırılmışEPSS %59

    microfocus · edirectory25 Ara 2012

  • CVE-2016-1606
    53Planlayın

    Multiple stack-based buffer overflows in COM objects in Micro Focus Rumba 9.4.x before 9.4 HF 13960 allow remote attackers to execute arbitr

    KritikCVSS 9,8Kavram kanıtıEPSS %46

    microfocus · rumba2 Tem 2016

  • CVE-2018-12465
    52Planlayın

    Remote Code Execution in Micro Focus Secure Messaging Gateway

    YüksekCVSS 7,2SilahlaştırılmışEPSS %80

    microfocus · secure messaging gateway29 Haz 2018

  • CVE-2020-11857
    44Planlayın

    An Authorization Bypass vulnerability on Micro Focus Operation Bridge Reporter, affecting version 10.40 and earlier.

    KritikCVSS 9,8SilahlaştırılmışEPSS %16

    microfocus · operation bridge reporter22 Eyl 2020

  • CVE-2016-5228
    44Planlayın

    Stack-based buffer overflow in the PlayMacro function in ObjectXMacro.ObjectXMacro in WdMacCtl.ocx in Micro Focus Rumba 9.x before 9.3 HF 11

    KritikCVSS 9,8Kavram kanıtıEPSS %15

    microfocus · rumba2 Tem 2016

  • CVE-2015-6946
    43Planlayın

    Multiple stack-based buffer overflows in the Reprise License Manager service in Borland AccuRev allow remote attackers to execute arbitrary

    KritikCVSS 9,3İstismar yokEPSS %21

    microfocus · accurev15 Eyl 2015

  • CVE-2008-7126
    43Planlayın

    Integer overflow in osagent.exe in Borland VisiBroker Smart Agent 08.00.00.C1.03 and earlier allows remote attackers to cause a denial of se

    KritikCVSS 10,0Kavram kanıtıEPSS %10

    microfocus · visibroker31 Ağu 2009

  • CVE-2009-5153
    41Planlayın

    In Novell NetWare before 6.5 SP8, a stack buffer overflow in processing of CALLIT RPC calls in the NFS Portmapper daemon in PKERNEL.NLM allo

    KritikCVSS 9,8İstismar yokEPSS %6

    microfocus · netware21 Kas 2018

  • CVE-2020-11856
    41Planlayın

    Arbitrary code execution vulnerability on Micro Focus Operation Bridge Reporter, affecting version 10.40 and earlier.

    KritikCVSS 9,8İstismar yokEPSS %5

    microfocus · operation bridge reporter22 Eyl 2020

  • CVE-2014-7885
    41Planlayın

    Multiple unspecified vulnerabilities in HP ArcSight Enterprise Security Manager (ESM) before 6.8c have unknown impact and remote attack vect

    KritikCVSS 10,0İstismar yokEPSS %3

    microfocus · arcsight enterprise security manager13 Mar 2015

  • CVE-2021-22504
    40Planlayın

    Arbitrary code execution vulnerability on Micro Focus Operations Bridge Manager product, affecting versions 10.1x, 10.6x, 2018.05, 2018.11,

    KritikCVSS 9,8İstismar yokEPSS %3

    microfocus · operations bridge manager12 Şub 2021

  • CVE-2018-6498
    40Planlayın

    Micro Focus Container Deployment Foundation (CDF), Remote Code Execution

    KritikCVSS 9,8İstismar yokEPSS %3

    microfocus · data center automation30 Ağu 2018

  • CVE-2020-11851
    40Planlayın

    Arbitrary code execution vulnerability on Micro Focus ArcSight Logger product, affecting all version prior to 7.1.1.

    KritikCVSS 9,8Kavram kanıtıEPSS %3

    microfocus · arcsight logger16 Kas 2020

  • CVE-2019-3476
    40Planlayın

    Remote arbitrary code execution in Micro Focus Data Protector, version 10.03 this vulnerability could allow remote arbitrary code execution.

    KritikCVSS 9,8İstismar yokEPSS %3

    microfocus · data protector25 Mar 2019

  • CVE-2016-9176
    40Planlayın

    Stack buffer overflow in the send.exe and receive.exe components of Micro Focus Rumba 9.4 and earlier could be used by local attackers or at

    KritikCVSS 9,8İstismar yokEPSS %3

    microfocus · rumba3 Kas 2016

  • CVE-2017-7420
    40Planlayın

    An Authentication Bypass (CWE-287) vulnerability in ESMAC (aka Enterprise Server Monitor and Control) in Micro Focus Enterprise Developer an

    KritikCVSS 9,8İstismar yokEPSS %2

    microfocus · enterprise developer21 Ağu 2017

  • CVE-2018-6499
    40Planlayın

    Remote Code Execution in the following products Hybrid Cloud Management Containerized Suite HCM2017.11, HCM2018.02, HCM2018.05, Operations B

    KritikCVSS 9,8İstismar yokEPSS %2

    microfocus · data center automation30 Ağu 2018

  • CVE-2018-7679
    40Planlayın

    Micro Focus Solutions Business Manager versions prior to 11.4 when ASP.NET is configured with execute permission on the virtual directories

    KritikCVSS 9,8İstismar yokEPSS %2

    microfocus · solutions business manager21 Haz 2018