MI
Vendor
Microfocus
332
CVEs
2
On KEV
0
New 30D
Products
AM7.5
Access Manager
Microfocus
18 CVEs1 on KEV0 new
OB9.8
Operation Bridge Reporter
Microfocus
4 CVEs1 on KEV0 new
IM9.8
Imanager
Microfocus
22 CVEs0 on KEV0 new
SB9.8
Solutions Business Manager
Microfocus
17 CVEs0 on KEV0 new
ED9.8
Edirectory
Microfocus
16 CVEs0 on KEV0 new
SM8.8
Service Manager
Microfocus
16 CVEs0 on KEV0 new
ED9.8
Enterprise Developer
Microfocus
12 CVEs0 on KEV0 new
ES9.8
Enterprise Server
Microfocus
12 CVEs0 on KEV0 new
NA9.9
Netiq Advanced Authentication
Microfocus
11 CVEs0 on KEV0 new
AA8.0
Application Automation Tools
Microfocus
9 CVEs0 on KEV0 new
AL9.8
Arcsight Logger
Microfocus
9 CVEs0 on KEV0 new
AM8.8
Arcsight Management Center
Microfocus
9 CVEs0 on KEV0 new
AE9.8
Arcsight Enterprise Security Manager
Microfocus
8 CVEs0 on KEV0 new
OA9.8
Operations Agent
Microfocus
7 CVEs0 on KEV0 new
OB9.8
Operations Bridge
Microfocus
7 CVEs0 on KEV0 new
FI7.8
Filr
Microfocus
6 CVEs0 on KEV0 new
OB9.8
Operations Bridge Manager
Microfocus
6 CVEs0 on KEV0 new
AP9.8
Application Performance Management
Microfocus
5 CVEs0 on KEV0 new
NA7.5
Netiq Access Manager
Microfocus
5 CVEs0 on KEV0 new
VI9.8
Visibroker
Microfocus
5 CVEs0 on KEV0 new
FS9.8
Fortify Software Security Center
Microfocus
4 CVEs0 on KEV0 new
NS9.8
Netiq Self Service Password Reset
Microfocus
4 CVEs0 on KEV0 new
SE7.5
Sentinel
Microfocus
4 CVEs0 on KEV0 new
SM9.8
Service Management Automation
Microfocus
4 CVEs0 on KEV0 new
VH7.6
Verastream Host Integrator
Microfocus
4 CVEs0 on KEV0 new
CM7.5
Content Manager
Microfocus
3 CVEs0 on KEV0 new
DC9.8
Data Center Automation
Microfocus
3 CVEs0 on KEV0 new
DP9.8
Data Protector
Microfocus
3 CVEs0 on KEV0 new
DC6.5
Dimensions CM
Microfocus
3 CVEs0 on KEV0 new
ES9.8
Enterprise Server Monitor And Control
Microfocus
3 CVEs0 on KEV0 new
HC9.8
Hybrid Cloud Management
Microfocus
3 CVEs0 on KEV0 new
IM9.8
Identity Manager
Microfocus
3 CVEs0 on KEV0 new
NO9.8
Network Operations Management
Microfocus
3 CVEs0 on KEV0 new
PU–
Privileged User Manager
Microfocus
3 CVEs0 on KEV0 new
PA7.4
Project And Portfolio Management
Microfocus
3 CVEs0 on KEV0 new
RU9.8
Rumba
Microfocus
3 CVEs0 on KEV0 new
SM9.8
Secure Messaging Gateway
Microfocus
3 CVEs0 on KEV0 new
AC7.5
Acutoweb
Microfocus
2 CVEs0 on KEV0 new
BD7.5
Bi-directional Driver
Microfocus
2 CVEs0 on KEV0 new
CS8.8
Cms Server
Microfocus
2 CVEs0 on KEV0 new
CS9.8
Cobol Server
Microfocus
2 CVEs0 on KEV0 new
DS8.8
Directory Server
Microfocus
2 CVEs0 on KEV0 new
ET9.8
Enterprise Test Server
Microfocus
2 CVEs0 on KEV0 new
GR7.2
Groupwise
Microfocus
2 CVEs0 on KEV0 new
NP7.8
Netiq Privileged Access Manager
Microfocus
2 CVEs0 on KEV0 new
NA8.8
Network Automation
Microfocus
2 CVEs0 on KEV0 new
SS7.5
Self Service Password Reset
Microfocus
2 CVEs0 on KEV0 new
SM8.8
Service Manager Automation
Microfocus
2 CVEs0 on KEV0 new
UC9.8
Ucmdb Configuration Manager
Microfocus
2 CVEs0 on KEV0 new
VC9.8
Visual Cobol
Microfocus
2 CVEs0 on KEV0 new
AC–
Accurev
Microfocus
1 CVEs0 on KEV0 new
AL8.1
Application Lifecycle Management
Microfocus
1 CVEs0 on KEV0 new
AE6.1
Arcsight Enterprise Security Manager Express
Microfocus
1 CVEs0 on KEV0 new
AP6.1
Arcsight Platform
Microfocus
1 CVEs0 on KEV0 new
AM6.1
Asset Management X
Microfocus
1 CVEs0 on KEV0 new
CL7.8
Client
Microfocus
1 CVEs0 on KEV0 new
CO–
Cobol
Microfocus
1 CVEs0 on KEV0 new
CB7.8
Connected Backup
Microfocus
1 CVEs0 on KEV0 new
FA9.8
Fortify Audit Workbench
Microfocus
1 CVEs0 on KEV0 new
FS9.8
Fortify Scancentral Dast
Microfocus
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-11877 | AM Access Manager Microfocus | 7.5 | Jun 24 | Missing Authorization Vulnerability in OpenText Access Manager |
| CVE-2026-11878 | AM Access Manager Microfocus | 6.1 | Jun 24 | Reflected Cross-Site Scripting vulnerability in OpenText Access Manager |
| CVE-2026-2123 | OA Operations Agent Microfocus | 7.8 | Mar 31 | Privilege escalation vulnerability in Operations Agent |
| CVE-2021-38116 | IM Imanager Microfocus | 8.8 | Nov 22 | Possible Command injection Vulnerability in OpenText iManager |
| CVE-2021-38117 | IM Imanager Microfocus | 9.8 | Nov 22 | Possible Remote Code Execution Vulnerability OpenText iManager |
| CVE-2021-38118 | IM Imanager Microfocus | 7.8 | Nov 22 | Possible Local Privilege Escalation Vulnerability in OpenText iManager |
| CVE-2021-38119 | IM Imanager Microfocus | 6.1 | Nov 22 | Possible Reflected Cross-Site Scripting (XSS) Vulnerability in OpenText iManager |
| CVE-2021-38134 | IM Imanager Microfocus | 6.1 | Nov 22 | Possible Reflected and Stored XSS in OpenText iManager |
| CVE-2021-38135 | IM Imanager Microfocus | 9.8 | Nov 22 | Possible External service interaction Vulnerability in OpenText iManager |
| CVE-2022-26324 | IM Imanager Microfocus | 5.4 | Nov 22 | Possible XSS in iManager URL for access Component |
| CVE-2023-24466 | IM Imanager Microfocus | 9.8 | Nov 22 | Possible XML External Entity Injection in OpenText iManager |
| CVE-2023-24467 | IM Imanager Microfocus | 9.8 | Nov 22 | Possible Command Injection in OpenText iManager |
| CVE-2024-9841 | AM Arcsight Management Center Microfocus | 6.1 | Nov 8 | OpenText ArcSight Management Center and ArcSight Platform Stored XSS |
| CVE-2020-11859 | IM Imanager Microfocus | 5.4 | Nov 6 | Potential Cross Site Scripting vulnerability in OpenText iManager |
| CVE-2024-5532 | OA Operations Agent Microfocus | 4.8 | Oct 28 | A stored XSS vulnerability has been discovered on OpenText™ Operations Agent (OA). |
| CVE-2024-4692 | AA Application Automation Tools Microfocus | 2.4 | Oct 16 | Multiple missing permission checks |
| CVE-2024-4690 | AA Application Automation Tools Microfocus | 8.0 | Oct 16 | Insecure usage for DocumentBuilderFactory and TransformerFactory in OpenText Application Automation Tools |
| CVE-2024-4211 | AA Application Automation Tools Microfocus | 2.4 | Oct 16 | Multiple missing permission checks |
| CVE-2024-4189 | AA Application Automation Tools Microfocus | 8.0 | Oct 16 | Multiple XXE sinks in Run LoadRunner script step in OpenText Application Automation Tools |
| CVE-2024-4184 | AA Application Automation Tools Microfocus | 8.0 | Oct 16 | Multiple XXE sinks in ALM archive post-build step in OpenText Application Automation Tools |
| CVE-2024-6360 | VE Vertica Microfocus | 9.8 | Oct 2 | Incorrect Permission Assignment for Critical Resource vulnerability has been discovered in OpenText™ Vertica. |
| CVE-2021-22503 | ED Edirectory Microfocus | 6.1 | Sep 12 | Improper Neutralization of Input During Web Page Generation Vulnerability |
| CVE-2021-22532 | ED Edirectory Microfocus | 7.5 | Sep 12 | Possible NLDAP Denial of Service attack Vulnerability |
| CVE-2021-22533 | ED Edirectory Microfocus | 9.1 | Sep 12 | Possible Insertion of Sensitive Information into Log File Vulnerability |
| CVE-2021-38131 | ED Edirectory Microfocus | 6.1 | Sep 12 | Cross-Site Scripting (XSS) Vulnerability |
| CVE-2021-38132 | ED Edirectory Microfocus | 9.8 | Sep 12 | Possible External service interaction Vulnerability |
| CVE-2021-38133 | ED Edirectory Microfocus | 6.5 | Sep 12 | Possible Improper authentication Vulnerability in OpenText eDirectory |
| CVE-2021-22509 | NA Netiq Advanced Authentication Microfocus | 6.5 | Aug 28 | Handling of sensitive data in process memory in NetIQ Advance Authentication |
| CVE-2021-22529 | NA Netiq Advanced Authentication Microfocus | 5.5 | Aug 28 | Sensitive Data Exposure leaks potential information in NetIQ Advance Authentication |
| CVE-2021-22530 | NA Netiq Advanced Authentication Microfocus | 9.9 | Aug 28 | Improper account management vulnerability in NetIQ Advance Authentication |
| CVE-2021-38120 | NA Netiq Advanced Authentication Microfocus | 7.2 | Aug 28 | Remote Code Execution using Bash command Injection in backup scheduling functionality in NetIQ Advance Authentication |
| CVE-2021-38121 | NA Netiq Advanced Authentication Microfocus | 8.8 | Aug 28 | Weak communication protocol identified in Advance Authentication client application |
| CVE-2021-38122 | NA Netiq Advanced Authentication Microfocus | 8.2 | Aug 28 | Cross-Site Scripting (XSS) in Advance Authentication |
| CVE-2024-4554 | NA Netiq Access Manager Microfocus | 5.4 | Aug 28 | Multiple xss vulnerability in NetIQ Access Manager |
| CVE-2024-4555 | NA Netiq Access Manager Microfocus | 7.5 | Aug 28 | User impersonation with MFA when configure in specific way |
| CVE-2024-4556 | NA Netiq Access Manager Microfocus | 7.5 | Aug 28 | Directory traversal vulnerability in NetIQ Access Manager |
| CVE-2024-42852 | AC Acutoweb Microfocus | 6.1 | Aug 23 | Cross Site Scripting vulnerability in AcuToWeb server v.10.5.0.7577C8b allows a remote attacker to execute arbitrary code via the index.php component |
| CVE-2020-11847 | NP Netiq Privileged Access Manager Microfocus | 7.8 | Aug 21 | Vulnerability in sshrelay in privileged access manager provides full system access. |
| CVE-2020-11846 | NP Netiq Privileged Access Manager Microfocus | 7.5 | Aug 21 | Improper handling of token allows access to restricted resource in Privileged Access Manager |
| CVE-2020-11850 | NS Netiq Self Service Password Reset Microfocus | 6.1 | Aug 21 | Cross site scripting vulnerability in Self Service Password Reset |
| CVE-2024-4429 | IM Imanager Microfocus | 7.4 | May 28 | Cross Site Request Forgery vulnerability in iManager |
| CVE-2024-3969 | IM Imanager Microfocus | 9.8 | May 28 | XML External Entity injection vulnerability in iManager |
| CVE-2024-3488 | IM Imanager Microfocus | 9.8 | May 15 | File Upload vulnerability in unauthenticated session found in iManager. |
| CVE-2024-3487 | IM Imanager Microfocus | 9.8 | May 15 | Broken Authentication vulnerability in iManager |
| CVE-2024-3486 | IM Imanager Microfocus | 9.8 | May 15 | XML External Entity injection vulnerability in iManager |
| CVE-2024-3485 | IM Imanager Microfocus | 7.5 | May 15 | Server-Side Request Forgery vulnerability in iManager |
| CVE-2024-3484 | IM Imanager Microfocus | 9.8 | May 15 | Path Traversal vulnerability found in iManager |
| CVE-2024-3483 | IM Imanager Microfocus | 9.8 | May 15 | Remote Code Execution vulnerability in the iManager |
| CVE-2024-3967 | IM Imanager Microfocus | 9.8 | May 15 | Remote Code Execution vulnerability in the iManager |
| CVE-2024-3968 | IM Imanager Microfocus | 9.8 | May 15 | Remote Code Execution vulnerability in the iManager |
| CVE-2024-3970 | IM Imanager Microfocus | 7.5 | May 15 | Server-Side Request Forgery vulnerability in iManager |
| CVE-2024-2834 | AM Arcsight Management Center Microfocus | 8.7 | Apr 8 | OpenText ArcSight Management Center and ArcSight Platform Stored XSS |
| CVE-2024-0622 | OA Operations Agent Microfocus | 7.8 | Feb 15 | Local privilege escalation vulnerability affects OpenText Operations Agent product versions 12.15 and 12.20-12.25 when installed on Non-Windows platforms |
| CVE-2020-25835 | AM Arcsight Management Center Microfocus | 5.4 | Dec 9 | A potential vulnerability has been identified in Micro Focus ArcSight Management Center |
| CVE-2023-32268 | FI Filr Microfocus | 7.2 | Dec 6 | Exposure of Proxy Administrator Credentials An authenticated administrator equivalent Filr user can access the credentials of proxy administrators |
| CVE-2023-5913 | FS Fortify Scancentral Dast Microfocus | 9.8 | Nov 8 | Incorrect Privilege Assignment vulnerability in opentext Fortify ScanCentral DAST |
| CVE-2023-4964 | SM Service Management Automation X Microfocus | 6.1 | Oct 30 | Potential open redirect vulnerability in opentext Service Management Automation X (SMAX) versions 2020.05, 2020.08, 2020.11, 2021.02, 2021.05, 2021.08, 2021.11, 2022.05, 2022.11… |
| CVE-2023-4501 | VC Visual Cobol Microfocus | 9.8 | Sep 12 | User authentication with username and password credentials is ineffective in OpenText (Micro Focus) Visual COBOL, COBOL Server, Enterprise Developer, and Enterprise Server… |
| CVE-2023-32267 | AM Arcsight Management Center Microfocus | 8.8 | Aug 11 | A potential vulnerability has been identified in OpenText / Micro Focus ArcSight Management Center |
| CVE-2023-32265 | CS Cobol Server Microfocus | 6.5 | Jul 20 | A potential security vulnerability has been identified in the Enterprise Server Common Web Administration (ESCWA) component used in Enterprise Server, Enterprise Test Server,… |