CVE-2017-9282

An integer overflow CWE-190 led to an out-of-bounds write CWE-787 on a heap-allocated area, leading to heap corruption in Micro Focus VisiBroker 8.5. The feasibility of leveraging this vulnerability for further attacks was not assessed...

CVE-2017-9283

An out-of-bounds read CWE-125 vulnerability exists in Micro Focus VisiBroker 8.5. The feasibility of leveraging this vulnerability for further attacks was not assessed...

CVE-2017-9282

CVE-2017-9282 affects Micro Focus VisiBroker 8.5 (VisiBroker C/C++) where an integer overflow (CWE-190) leads to a heap-allocated out-of-bounds write (CWE-787) and consequent heap corruption. The CVE entry cites a high/severe impact (NVD CVSS v3: 9.8, Critical) with network attack vector and no u...

CVE-2017-9283

CVE-2017-9283 affects Micro Focus VisiBroker 8.5. The vulnerability is an out-of-bounds read (CWE-125) in VisiBroker 8.5. The connected sources indicate related memory‑corruption vulnerabilities in 8.5 SP2/8.5 SP4 HF3 lines, but do not provide exploit details. In SEC Consult/SEC reports, a fixed ...

PT-2017-18820

Name of the Vulnerable Software and Affected Versions Micro Focus VisiBroker version 8.5 Description An integer overflow led to an out-of-bounds write on a heap-allocated area, resulting in heap corruption. The feasibility of leveraging this issue for further attacks was not assessed...

PT-2017-18821

Name of the Vulnerable Software and Affected Versions Micro Focus VisiBroker version 8.5 Description An out-of-bounds read issue exists. The feasibility of leveraging this issue for further attacks was not assessed. Recommendations For version 8.5, at the moment, there is no information about a...

CVE-2017-9283: Out-of-bounds Read

An out-of-bounds read CWE-125 vulnerability exists in Micro Focus VisiBroker 8.5. The feasibility of leveraging this vulnerability for further attacks was not assessed...

CVE-2017-9282: Integer Overflow or Wraparound

An integer overflow CWE-190 led to an out-of-bounds write CWE-787 on a heap-allocated area, leading to heap corruption in Micro Focus VisiBroker 8.5. The feasibility of leveraging this vulnerability for further attacks was not assessed...

CVE-2017-9281: Integer Overflow or Wraparound

An integer overflow CWE-190 potentially causing an out-of-bounds read CWE-125 vulnerability in Micro Focus VisiBroker 8.5 can lead to a denial of service...

PT-2017-18819

Name of the Vulnerable Software and Affected Versions Micro Focus VisiBroker version 8.5 Description The issue is related to an integer overflow that can cause an out-of-bounds read, potentially leading to a denial of service. Recommendations For Micro Focus VisiBroker version 8.5, at the moment,...

Micro Focus Enterprise Developer and Enterprise Server Cross-Site Scripting Vulnerability (CNVD-2017-26441)

Micro Focus Enterprise Developer and Enterprise Server are both products of Micro Focus, a British company. micro Focus Enterprise Developer is a set of integrated development environments for the mainframe. enterprise Server is a set of Enterprise Server is a production deployment platform for...

Micro Focus Enterprise Developer and Enterprise Server Authentication Bypass Vulnerability

Micro Focus Enterprise Developer and Enterprise Server are both products of Micro Focus, a British company.Micro Focus Enterprise Developer is a set of integrated development environments for the mainframe.Enterprise Server is a production deployment platform for mainframe programs. Enterprise...

Micro Focus Enterprise Developer and Enterprise Server Cross-Site Request Forgery Vulnerability (CNVD-2017-26443)

Micro Focus Enterprise Developer and Enterprise Server are both products of Micro Focus, a British company. micro Focus Enterprise Developer is a set of integrated development environments for the mainframe. enterprise Server is a production deployment platform for mainframe programs. Enterprise...

Micro Focus Enterprise Developer and Enterprise Server Cross-Site Scripting Vulnerability

Micro Focus Enterprise Developer and Enterprise Server are both products of Micro Focus, a British company.Micro Focus Enterprise Developer is a set of integrated development environments for the mainframe.Enterprise Server is a production deployment platform for mainframe programs. Enterprise...

Micro Focus Enterprise Developer and Enterprise Server Path Traversal Vulnerability

Micro Focus Enterprise Developer and Enterprise Server are both products of Micro Focus, a British company.Micro Focus Enterprise Developer is a set of integrated development environments for the mainframe.Enterprise Server is a production deployment platform for mainframe programs. Enterprise...

CVE-2017-7420

An Authentication Bypass CWE-287 vulnerability in ESMAC aka Enterprise Server Monitor and Control in Micro Focus Enterprise Developer and Enterprise Server 2.3 and earlier, 2.3 Update 1 before Hotfix 8, and 2.3 Update 2 before Hotfix 9 allows remote unauthenticated attackers to view and alter...

Cross site request forgery (csrf)

A Cross-Site Request Forgery CWE-352 vulnerability in Directory Server aka Enterprise Server Administration web UI in Micro Focus Enterprise Developer and Enterprise Server 2.3 and earlier, 2.3 Update 1 before Hotfix 8, and 2.3 Update 2 before Hotfix 9 allows remote unauthenticated attackers to...

Cross site scripting

Reflected and stored Cross-Site Scripting XSS, CWE-79 vulnerabilities in Directory Server aka Enterprise Server Administration web UI and ESMAC aka Enterprise Server Monitor and Control in Micro Focus Enterprise Developer and Enterprise Server 2.3 and earlier, 2.3 Update 1 before Hotfix 8, and 2....

Authentication flaw

An Authentication Bypass CWE-287 vulnerability in ESMAC aka Enterprise Server Monitor and Control in Micro Focus Enterprise Developer and Enterprise Server 2.3 and earlier, 2.3 Update 1 before Hotfix 8, and 2.3 Update 2 before Hotfix 9 allows remote unauthenticated attackers to view and alter...

Cross site scripting

Reflected and stored Cross-Site Scripting XSS, CWE-79 vulnerabilities in esfadmingui in Micro Focus Enterprise Developer and Enterprise Server 2.3, 2.3 Update 1 before Hotfix 8, and 2.3 Update 2 before Hotfix 9 allow remote authenticated attackers to bypass protection mechanisms CWE-693 and other...