CVE-2023-32261

The CVE-2023-32261 case concerns the Micro Focus Dimensions CM Plugin for Jenkins. Multiple connected sources confirm a concrete issue: Dimensions Plugin versions 0.9.3 and earlier fail to perform a proper permission check in an HTTP endpoint, allowing users with Overall/Read access to enumerate ...

CVE-2023-32261 Dimensions CM Plugin for Jenkins 0.8.17 – 0.9.3

A potential vulnerability has been identified in the Micro Focus Dimensions CM Plugin for Jenkins. The vulnerability allows attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins. See the following Jenkins security advisory for details:...

CVE-2023-32262

A potential vulnerability has been identified in the Micro Focus Dimensions CM Plugin for Jenkins. The vulnerability allows attackers with Item/Configure permission to access and capture credentials they are not entitled to. See the following Jenkins security advisory for details:...

CVE-2023-32261

A potential vulnerability has been identified in the Micro Focus Dimensions CM Plugin for Jenkins. The vulnerability allows attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins. See the following Jenkins security advisory for details:...

Micro Focus Access Manager < 5.0 Multiple Vulnerabilities

The version of Micro Focus Access Manager installed on the remote host is prior to 5.0. It is, therefore, affected by the following vulnerabilities: - Cross-Site scripting vulnerability in Micro Focus Access Manager product, affects all version prior to version 5.0. The vulnerability could cause...

Micro Focus NetIQ Access Manager Installed (Windows)

Binary data microfocusnetiqaccessmanagerwininstalled.nbin...

Micro Focus NetIQ Access Manager Installed (Linux)

Binary data microfocusnetiqaccessmanagernixinstalled.nbin...

SUSE CVE-2017-7433

An absolute path traversal vulnerability CWE-36 in Micro Focus Vibe 4.0.2 and earlier allows a remote authenticated attacker to download arbitrary files from the server by submitting a specially crafted request to the viewFile endpoint. Note that the attack can be performed without authentication...

SUSE CVE-2018-19644

Reflected cross site script issue in Micro Focus Solutions Business Manager SBM formerly Serena Business Manager SBM versions prior to 11.5...

Micro Focus GroupWise Session ID Disclosure Vulnerability

Micro Focus GroupWise is a messaging software for email and personal information management. Trovent Security GmbH discovered that the GroupWise web application transmits the session ID in HTTP GET requests in the URL when email content is accessed. The exposed session ID can be recorded in the...

Micro Focus GroupWise Session ID Disclosure

Trovent Security Advisory 2203-01 Micro Focus GroupWise transmits session ID in URL Overview Advisory ID: TRSA-2203-01 Advisory version: 1.0 Advisory status: Public Advisory URL: https://trovent.io/security-advisory-2203-01 Affected product: Micro Focus GroupWise Affected version: prior to 18.4.2...

CVE-2022-38758

Cross-site Scripting XSS vulnerability in NetIQ iManager prior to version 3.2.6 allows attacker to execute malicious scripts on the user's browser. This issue affects: Micro Focus NetIQ iManager NetIQ iManager versions prior to 3.2.6 on ALL...

Privilege escalation

File existence disclosure vulnerability in NetIQ Identity Manager plugin prior to version 4.8.5 allows attacker to determine whether a file exists on the filesystem. This issue affects: Micro Focus NetIQ Identity Manager NetIQ Identity Manager versions prior to 4.8.5 on ALL...

Cross site scripting

Cross-site Scripting XSS vulnerability in NetIQ iManager prior to version 3.2.6 allows attacker to execute malicious scripts on the user's browser. This issue affects: Micro Focus NetIQ iManager NetIQ iManager versions prior to 3.2.6 on ALL...

Micro Focus / Novell GroupWise Detection Consolidation

Consolidation of Micro Focus / Novell GroupWise detections. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only include"pluginfeedinfo.inc"; if...

CVE-2022-38758

NetIQ iManager prior to version 3.2.6 is affected by a Cross-site Scripting (XSS) vulnerability that lets an attacker cause the victim’s browser to execute malicious scripts. The issue affects Micro Focus NetIQ iManager on all platforms with versions older than 3.2.6. Root cause details are not e...

CVE-2022-26329

The vulnerability CVE-2022-26329 affects NetIQ Identity Manager plugin (prior to version 4.8.5). It is a File Presence Disclosure vulnerability that lets an attacker determine whether a file exists on the filesystem. Affected products: Micro Focus NetIQ Identity Manager Identity Manager versions ...

CVE-2022-38757

A vulnerability has been identified in Micro Focus ZENworks 2020 Update 3a and prior versions. This vulnerability allows administrators with rights to perform actions e.g., install a bundle on a set of managed devices, to be able to exercise these rights on managed devices in the ZENworks zone bu...

Design/Logic Flaw

A vulnerability has been identified in Micro Focus ZENworks 2020 Update 3a and prior versions. This vulnerability allows administrators with rights to perform actions e.g., install a bundle on a set of managed devices, to be able to exercise these rights on managed devices in the ZENworks zone bu...

CVE-2022-38757

Technical details about CVE-2022-38757 are not publicly available in the provided connected documents. Monitor for updates from vendors and security feeds for any disclosed root cause, affected versions beyond Micro Focus ZENworks 2020 Update 3a and prior.