Login Request a demo
SM
Product
Service Manager
by Microfocus · last CVE May 19, 2020
16
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Vulnerabilities16In the news0Timeline
Severity mix
Critical 0High 7Medium 9Low 0
Severity
All severities16Critical0High7Medium9Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Service Manager to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2019-11666
8.8
1%
Sep 17
Insecure deserialization of untrusted data in Micro Focus Service Manager product versions 9.30, 9.31, 9.32, 9.33, 9.34, 9.35, 9.40, 9.41, 9.50, 9.51, 9.52, 9.60, 9.61, 9.62
Affected: 9.30 through 9.62
CVE-2019-11646
8.8
2%
Jun 3
Remote unauthorized command execution and unauthorized disclosure of information in Micro Focus Service Manager, versions 9.30, 9.31, 9.32, 9.33, 9.34, 9.35, 9.40, 9.41, 9.50,…
Affected: 9.30; 9.31; 9.32; 9.33; 9.34; 9.35; +7 more
CVE-2019-11661
8.3
1%
Sep 18
Allow changes to some table by non-SysAdmin in Micro Focus Service Manager product versions 9.30, 9.31, 9.32, 9.33, 9.34, 9.35, 9.40, 9.41, 9.50, 9.51, 9.52, 9.60, 9.61, 9.62
Affected: 9.30 through 9.62
CVE-2019-11665
7.5
1%
Sep 17
Data exposure in Micro Focus Service Manager product versions 9.30, 9.31, 9.32, 9.33, 9.34, 9.35, 9.40, 9.41, 9.50, 9.51, 9.52, 9.60, 9.61, 9.62
Affected: 9.30 through 9.62
CVE-2019-11667
7.5
1%
Sep 17
Unauthorized access to contact information in Micro Focus Service Manager, versions 9.41, 9.50, 9.51, 9.52, 9.60, 9.61, 9.62
Affected: 9.41 through 9.62
CVE-2019-11669
7.5
1%
Sep 10
Modifiable read only check box In Micro Focus Service Manager, versions 9.60p1, 9.61, 9.62
Affected: 9.60; 9.61; 9.62
CVE-2019-11668
7.5
1%
Sep 10
HTTP cookie in Micro Focus Service manager, Versions 9.30, 9.31, 9.32, 9.33, 9.34, 9.35, 9.40, 9.41, 9.50, 9.51, 9.52, 9.60, 9.61, 9.62
Affected: 9.30; 9.31; 9.32; 9.33; 9.34; 9.35; +8 more
CVE-2019-11664
6.5
1%
Sep 18
Clear text password in browser in Micro Focus Service Manager product versions 9.30, 9.31, 9.32, 9.33, 9.34, 9.35, 9.40, 9.41, 9.50, 9.51, 9.52, 9.60, 9.61, 9.62
Affected: 9.30 through 9.62
CVE-2019-11663
6.5
0%
Sep 18
Clear text credentials are used to access managers app in Tomcat in Micro Focus Service Manager product versions 9.30, 9.31, 9.32, 9.33, 9.34, 9.35, 9.40, 9.41, 9.50, 9.51, 9.52,…
Affected: 9.30 through 9.62
CVE-2018-18591
6.5
1%
Nov 13
A potential unauthorized disclosure of data vulnerability has been identified in Micro Focus Service Manager versions: 9.30, 9.31, 9.32, 9.33, 9.34, 9.35, 9.40, 9.41, 9.50, 9.51
Affected: 9.30; 9.31; 9.32; 9.33; 9.34; 9.35; +4 more
CVE-2020-11845
6.1
1%
May 19
Cross Site Scripting vulnerability in Micro Focus Service Manager product
Affected: 9.50 through 9.63
CVE-2020-9517
5.4
0%
Mar 9
There is an improper restriction of rendered UI layers or frames vulnerability in Micro Focus Service Manager Release Control versions 9.50 and 9.60
Affected: 9.50; 9.60
CVE-2018-6494
5.4
1%
May 22
Remote SQL Injection against the HP Service Manager Software Web Tier, version 9.30, 9.31, 9.32, 9.33, 9.34, 9.35, 9.40, 9.41, 9.50, 9.51, may lead to unauthorized disclosure of…
Affected: 9.30; 9.31; 9.32; 9.33; 9.34; 9.35; +4 more
CVE-2020-9518
5.3
1%
Mar 16
Login filter can access configuration files vulnerability in Micro Focus Service Manager (Web Tier), affecting versions 9.50, 9.51, 9.52, 9.60, 9.61, 9.62
Affected: 9.50 through 9.62
CVE-2020-9519
5.3
1%
Mar 16
HTTP methods reveled in Web services vulnerability in Micro Focus Service manager (server), affecting versions 9.40, 9.41, 9.50, 9.51, 9.52, 9.60, 9.61, 9.62, 9.63
Affected: 9.40 through 9.63
CVE-2019-11662
4.3
1%
Sep 18
Class and method names in error message in Micro Focus Service Manager product versions 9.30, 9.31, 9.32, 9.33, 9.34, 9.35, 9.40, 9.41, 9.50, 9.51, 9.52, 9.60, 9.61, 9.62
Affected: 9.30 through 9.62
Showing 16