Login Request a demo
MI
Vendor
Microfocus
96 products with CVEs on record
330
CVEs
2
On KEV
0
New 30D
Products
AM
Access Manager
Microfocus
7.5
18 CVEs1 on KEV0 new
OB
Operation Bridge Reporter
Microfocus
9.8
4 CVEs1 on KEV0 new
IM
Imanager
Microfocus
9.8
22 CVEs0 on KEV0 new
SB
Solutions Business Manager
Microfocus
9.8
17 CVEs0 on KEV0 new
ED
Edirectory
Microfocus
9.8
16 CVEs0 on KEV0 new
SM
Service Manager
Microfocus
8.8
16 CVEs0 on KEV0 new
ED
Enterprise Developer
Microfocus
9.8
12 CVEs0 on KEV0 new
ES
Enterprise Server
Microfocus
9.8
12 CVEs0 on KEV0 new
NA
Netiq Advanced Authentication
Microfocus
9.9
11 CVEs0 on KEV0 new
AA
Application Automation Tools
Microfocus
8.0
9 CVEs0 on KEV0 new
AL
Arcsight Logger
Microfocus
9.8
9 CVEs0 on KEV0 new
AE
Arcsight Enterprise Security Manager
Microfocus
9.8
8 CVEs0 on KEV0 new
AM
Arcsight Management Center
Microfocus
8.8
8 CVEs0 on KEV0 new
OA
Operations Agent
Microfocus
9.8
7 CVEs0 on KEV0 new
OB
Operations Bridge
Microfocus
9.8
7 CVEs0 on KEV0 new
FI
Filr
Microfocus
7.8
6 CVEs0 on KEV0 new
OB
Operations Bridge Manager
Microfocus
9.8
6 CVEs0 on KEV0 new
AP
Application Performance Management
Microfocus
9.8
5 CVEs0 on KEV0 new
NA
Netiq Access Manager
Microfocus
7.5
5 CVEs0 on KEV0 new
VI
Visibroker
Microfocus
9.8
5 CVEs0 on KEV0 new
FS
Fortify Software Security Center
Microfocus
9.8
4 CVEs0 on KEV0 new
NS
Netiq Self Service Password Reset
Microfocus
9.8
4 CVEs0 on KEV0 new
SE
Sentinel
Microfocus
7.5
4 CVEs0 on KEV0 new
SM
Service Management Automation
Microfocus
9.8
4 CVEs0 on KEV0 new
VH
Verastream Host Integrator
Microfocus
7.6
4 CVEs0 on KEV0 new
CM
Content Manager
Microfocus
7.5
3 CVEs0 on KEV0 new
DC
Data Center Automation
Microfocus
9.8
3 CVEs0 on KEV0 new
DP
Data Protector
Microfocus
9.8
3 CVEs0 on KEV0 new
DC
Dimensions CM
Microfocus
6.5
3 CVEs0 on KEV0 new
ES
Enterprise Server Monitor And Control
Microfocus
9.8
3 CVEs0 on KEV0 new
HC
Hybrid Cloud Management
Microfocus
9.8
3 CVEs0 on KEV0 new
IM
Identity Manager
Microfocus
9.8
3 CVEs0 on KEV0 new
NO
Network Operations Management
Microfocus
9.8
3 CVEs0 on KEV0 new
PU
Privileged User Manager
Microfocus
–
3 CVEs0 on KEV0 new
PA
Project And Portfolio Management
Microfocus
7.4
3 CVEs0 on KEV0 new
RU
Rumba
Microfocus
9.8
3 CVEs0 on KEV0 new
SM
Secure Messaging Gateway
Microfocus
9.8
3 CVEs0 on KEV0 new
BD
Bi-directional Driver
Microfocus
7.5
2 CVEs0 on KEV0 new
CS
Cms Server
Microfocus
8.8
2 CVEs0 on KEV0 new
CS
Cobol Server
Microfocus
9.8
2 CVEs0 on KEV0 new
DS
Directory Server
Microfocus
8.8
2 CVEs0 on KEV0 new
ET
Enterprise Test Server
Microfocus
9.8
2 CVEs0 on KEV0 new
GR
Groupwise
Microfocus
7.2
2 CVEs0 on KEV0 new
NP
Netiq Privileged Access Manager
Microfocus
7.8
2 CVEs0 on KEV0 new
NA
Network Automation
Microfocus
8.8
2 CVEs0 on KEV0 new
SS
Self Service Password Reset
Microfocus
7.5
2 CVEs0 on KEV0 new
SM
Service Manager Automation
Microfocus
8.8
2 CVEs0 on KEV0 new
UC
Ucmdb Configuration Manager
Microfocus
9.8
2 CVEs0 on KEV0 new
VC
Visual Cobol
Microfocus
9.8
2 CVEs0 on KEV0 new
AC
Accurev
Microfocus
–
1 CVEs0 on KEV0 new
AC
Acutoweb
Microfocus
7.5
1 CVEs0 on KEV0 new
AL
Application Lifecycle Management
Microfocus
8.1
1 CVEs0 on KEV0 new
AE
Arcsight Enterprise Security Manager Express
Microfocus
6.1
1 CVEs0 on KEV0 new
AP
Arcsight Platform
Microfocus
6.1
1 CVEs0 on KEV0 new
AM
Asset Management X
Microfocus
6.1
1 CVEs0 on KEV0 new
CL
Client
Microfocus
7.8
1 CVEs0 on KEV0 new
CO
Cobol
Microfocus
–
1 CVEs0 on KEV0 new
CB
Connected Backup
Microfocus
7.8
1 CVEs0 on KEV0 new
FA
Fortify Audit Workbench
Microfocus
9.8
1 CVEs0 on KEV0 new
FS
Fortify Scancentral Dast
Microfocus
9.8
1 CVEs0 on KEV0 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2026-11877
AM
Access Manager
Microfocus
7.5
0%
Jun 24Missing Authorization Vulnerability in OpenText Access Manager
CVE-2026-11878
AM
Access Manager
Microfocus
6.1
0%
Jun 24Reflected Cross-Site Scripting vulnerability in OpenText Access Manager
CVE-2026-2123
OA
Operations Agent
Microfocus
7.8
0%
Mar 31Privilege escalation vulnerability in Operations Agent
CVE-2023-24467
IM
Imanager
Microfocus
9.8
1%
Nov 22Possible Command Injection in iManager GET parameter has been discovered in OpenText™ iManager 3.2.6.0000
CVE-2023-24466
IM
Imanager
Microfocus
9.8
1%
Nov 22Possible XML External Entity Injection in iManager GET parameter has been discovered in OpenText™ iManager 3.2.6.0200
CVE-2022-26324
IM
Imanager
Microfocus
5.4
0%
Nov 22Possible XSS in iManager URL for access Component has been discovered in OpenText™ iManager 3.2.6.0000
CVE-2021-38135
IM
Imanager
Microfocus
9.8
0%
Nov 22Possible External Service Interaction attack in iManager has been discovered in OpenText™ iManager 3.2.6.0000
CVE-2021-38134
IM
Imanager
Microfocus
6.1
0%
Nov 22Possible XSS in iManager URL for access Component has been discovered in OpenText™ iManager 3.2.5.0000
CVE-2021-38119
IM
Imanager
Microfocus
6.1
0%
Nov 22Possible Reflected Cross-Site Scripting (XSS) Vulnerability in iManager has been discovered in OpenText™ iManager 3.2.4.0000
CVE-2021-38118
IM
Imanager
Microfocus
7.8
0%
Nov 22Possible improper input validation Vulnerability in iManager has been discovered in OpenText™ iManager 3.2.4.0000
CVE-2021-38117
IM
Imanager
Microfocus
9.8
1%
Nov 22Possible Command injection Vulnerability in iManager has been discovered in OpenText™ iManager 3.2.4.0000
CVE-2021-38116
IM
Imanager
Microfocus
8.8
1%
Nov 22Possible Elevation of Privilege Vulnerability in iManager has been discovered in OpenText™ iManager
CVE-2024-9841
AM
Arcsight Management Center
Microfocus
6.1
0%
Nov 8A Reflected Cross-Site Scripting (XSS) vulnerability has been identified in OpenText ArcSight Management Center and ArcSight Platform
CVE-2020-11859
IM
Imanager
Microfocus
5.4
0%
Nov 6Improper Input Validation vulnerability in OpenText iManager allows Cross-Site Scripting (XSS). This issue affects iManager before 3.2.3
CVE-2024-5532
OA
Operations Agent
Microfocus
4.8
0%
Oct 28Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in OpenText™ Operations Agent.  The XSS vulnerability could allow an…
CVE-2024-4692
AA
Application Automation Tools
Microfocus
2.4
0%
Oct 16Improper Validation of Specified Quantity in Input vulnerability in OpenText OpenText Application Automation Tools allows Exploiting Incorrectly Configured Access Control Security…
CVE-2024-4690
AA
Application Automation Tools
Microfocus
8.0
0%
Oct 16Improper Restriction of XML External Entity Reference vulnerability in OpenText Application Automation Tools allows DTD Injection.This issue affects OpenText Application…
CVE-2024-4211
AA
Application Automation Tools
Microfocus
2.4
0%
Oct 16Improper Validation of Specified Quantity in Input vulnerability in OpenText OpenText Application Automation Tools allows Exploiting Incorrectly Configured Access Control Security…
CVE-2024-4189
AA
Application Automation Tools
Microfocus
8.0
0%
Oct 16Improper Restriction of XML External Entity Reference vulnerability in OpenText Application Automation Tools allows DTD Injection.This issue affects OpenText Application…
CVE-2024-4184
AA
Application Automation Tools
Microfocus
8.0
0%
Oct 16Improper Restriction of XML External Entity Reference vulnerability in OpenText Application Automation Tools allows DTD Injection.This issue affects OpenText Application…
CVE-2024-6360
VE
Vertica
Microfocus
9.8
0%
Oct 2Incorrect Permission Assignment for Critical Resource vulnerability in OpenText™ Vertica could allow Privilege Abuse and result in unauthorized access or privileges to Vertica…
CVE-2021-38133
ED
Edirectory
Microfocus
6.5
0%
Sep 12Possible External Service Interaction attack in eDirectory has been discovered in OpenText™ eDirectory
CVE-2021-38132
ED
Edirectory
Microfocus
9.8
0%
Sep 12Possible External Service Interaction attack in eDirectory has been discovered in OpenText™ eDirectory
CVE-2021-38131
ED
Edirectory
Microfocus
6.1
0%
Sep 12Possible Cross-Site Scripting (XSS) Vulnerability in eDirectory has been discovered in OpenText™ eDirectory 9.2.5.0000
CVE-2021-22533
ED
Edirectory
Microfocus
9.1
0%
Sep 12Possible Insertion of Sensitive Information into Log File Vulnerability in eDirectory has been discovered in OpenText™ eDirectory 9.2.4.0000
CVE-2021-22532
ED
Edirectory
Microfocus
7.5
0%
Sep 12Possible NLDAP Denial of Service attack Vulnerability in eDirectory has been discovered in OpenText™ eDirectory before 9.2.4.0000
CVE-2021-22503
ED
Edirectory
Microfocus
6.1
0%
Sep 12Possible Improper Neutralization of Input During Web Page Generation Vulnerability in eDirectory has been discovered in OpenText™ eDirectory 9.2.3.0000
CVE-2024-4556
NA
Netiq Access Manager
Microfocus
7.5
0%
Aug 28Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in OpenText NetIQ Access Manager allows access the sensitive information. This issue…
CVE-2024-4555
NA
Netiq Access Manager
Microfocus
7.5
0%
Aug 28Improper Privilege Management vulnerability in OpenText NetIQ Access Manager allows user account impersonation in specific scenario. This issue affects NetIQ Access Manager before…
CVE-2024-4554
NA
Netiq Access Manager
Microfocus
5.4
0%
Aug 28Improper Input Validation vulnerability in OpenText NetIQ Access Manager leads to Cross-Site Scripting (XSS) attack. This issue affects Access Manager before 5.0.4.1 and 5.1
CVE-2021-38122
NA
Netiq Advanced Authentication
Microfocus
8.2
0%
Aug 28A Cross-Site Scripting vulnerable identified in NetIQ Advance Authentication that impacts the server functionality and disclose sensitive information
CVE-2021-38121
NA
Netiq Advanced Authentication
Microfocus
8.8
0%
Aug 28Insufficient or weak TLS protocol version identified in Advance authentication client server communication when specific service is accessed between devices.  This issue affects…
CVE-2021-38120
NA
Netiq Advanced Authentication
Microfocus
7.2
1%
Aug 28A vulnerability identified in Advance Authentication that allows bash command Injection in administrative controlled functionality of backup due to improper handling in…
CVE-2021-22530
NA
Netiq Advanced Authentication
Microfocus
9.9
0%
Aug 28A vulnerability identified in NetIQ Advance Authentication that doesn't enforce account lockout when brute force attack is performed on API based login
CVE-2021-22529
NA
Netiq Advanced Authentication
Microfocus
5.5
0%
Aug 28A vulnerability identified in NetIQ Advance Authentication that leaks sensitive server information
CVE-2021-22509
NA
Netiq Advanced Authentication
Microfocus
6.5
0%
Aug 28A vulnerability identified in storing and reusing information in Advance Authentication
CVE-2020-11847
NP
Netiq Privileged Access Manager
Microfocus
7.8
0%
Aug 21SSH authenticated user when access the PAM server can execute an OS command to gain the full system access using bash
CVE-2020-11846
NP
Netiq Privileged Access Manager
Microfocus
7.5
0%
Aug 21A vulnerability found in OpenText Privileged Access Manager that issues a token
CVE-2020-11850
NS
Netiq Self Service Password Reset
Microfocus
6.1
0%
Aug 21Improper Input Validation vulnerability in OpenText Self Service Password Reset allows Cross-Site Scripting (XSS). This issue affects Self Service Password Reset before 4.5.0.2…
CVE-2024-4429
IM
Imanager
Microfocus
7.4
0%
May 28Cross-Site Request Forgery vulnerability has been discovered in OpenText™ iManager 3.2.6.0200
CVE-2024-3969
IM
Imanager
Microfocus
9.8
0%
May 28XML External Entity injection vulnerability found in OpenText™ iManager 3.2.6.0200
CVE-2024-3970
IM
Imanager
Microfocus
7.5
1%
May 15Server Side Request Forgery vulnerability has been discovered in OpenText™ iManager 3.2.6.0200
CVE-2024-3968
IM
Imanager
Microfocus
9.8
1%
May 15Remote Code Execution has been discovered in OpenText™ iManager 3.2.6.0200. The vulnerability can trigger remote code execution using custom file upload task
CVE-2024-3967
IM
Imanager
Microfocus
9.8
1%
May 15Remote Code Execution has been discovered in OpenText™ iManager 3.2.6.0200. The vulnerability can trigger remote code execution unisng unsafe java object deserialization
CVE-2024-3488
IM
Imanager
Microfocus
9.8
0%
May 15File Upload vulnerability in unauthenticated session found in OpenText™ iManager 3.2.6.0200. The vulnerability could allow ant attacker to upload a file without authentication
CVE-2024-3487
IM
Imanager
Microfocus
9.8
0%
May 15Broken Authentication vulnerability discovered in OpenText™ iManager 3.2.6.0200. This vulnerability allows an attacker to manipulate certain parameters to bypass authentication
CVE-2024-3486
IM
Imanager
Microfocus
9.8
0%
May 15XML External Entity injection vulnerability found in OpenText™ iManager 3.2.6.0200
CVE-2024-3485
IM
Imanager
Microfocus
7.5
0%
May 15Server Side Request Forgery vulnerability has been discovered in OpenText™ iManager 3.2.6.0200
CVE-2024-3484
IM
Imanager
Microfocus
9.8
1%
May 15Path Traversal found in OpenText™ iManager 3.2.6.0200
CVE-2024-3483
IM
Imanager
Microfocus
9.8
1%
May 15Remote Code Execution has been discovered in OpenText™ iManager 3.2.6.0200. The vulnerability can trigger command injection and insecure deserialization issues
CVE-2024-0622
OA
Operations Agent
Microfocus
7.8
0%
Feb 15Local privilege escalation vulnerability affects OpenText Operations Agent product versions 12.15 and 12.20-12.25 when installed on Non-Windows platforms
CVE-2020-25835
AM
Arcsight Management Center
Microfocus
5.4
0%
Dec 9A potential vulnerability has been identified in Micro Focus ArcSight Management Center
CVE-2023-32268
FI
Filr
Microfocus
7.2
1%
Dec 6Exposure of Proxy Administrator Credentials An authenticated administrator equivalent Filr user can access the credentials of proxy administrators
CVE-2023-5913
FS
Fortify Scancentral Dast
Microfocus
9.8
1%
Nov 8Incorrect Privilege Assignment vulnerability in opentext Fortify ScanCentral DAST
CVE-2023-4964
AM
Asset Management X
Microfocus
6.1
0%
Oct 30Potential open redirect vulnerability in opentext Service Management Automation X (SMAX) versions 2020.05, 2020.08, 2020.11, 2021.02, 2021.05, 2021.08, 2021.11, 2022.05, 2022.11…
CVE-2023-4501
ES
Enterprise Server
Microfocus
9.8
1%
Sep 12User authentication with username and password credentials is ineffective in OpenText (Micro Focus) Visual COBOL, COBOL Server, Enterprise Developer, and Enterprise Server…
CVE-2023-32267
AM
Arcsight Management Center
Microfocus
8.8
0%
Aug 11A potential vulnerability has been identified in OpenText / Micro Focus ArcSight Management Center
CVE-2023-32265
VC
Visual Cobol
Microfocus
6.5
0%
Jul 20A potential security vulnerability has been identified in the Enterprise Server Common Web Administration (ESCWA) component used in Enterprise Server, Enterprise Test Server,…
CVE-2023-32263
DC
Dimensions CM
Microfocus
5.7
0%
Jul 19A potential vulnerability has been identified in the Micro Focus Dimensions CM Plugin for Jenkins
CVE-2023-32262
DC
Dimensions CM
Microfocus
6.5
1%
Jul 19A potential vulnerability has been identified in the Micro Focus Dimensions CM Plugin for Jenkins