1259 matches found
Micro Focus UCMDB Remote Code Execution Exploit
This Metasploit module exploits two vulnerabilities, that when chained allow an attacker to achieve unauthenticated remote code execution in Micro Focus UCMDB. UCMDB included in versions 2020.05 and below of Operations Bridge Manager are affected, but this module can probably also be used to...
Micro Focus UCMDB Remote Code Execution
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Micro Focus UCMDB Java Deserialization Unauthenticated Remote Code Execution', 'Description' = %q This module exploits two vulnerabilities, that...
Micro Focus UCMDB Java Deserialization Unauthenticated Remote Code Execution
This module exploits two vulnerabilities, that when chained allow an attacker to achieve unauthenticated remote code execution in Micro Focus UCMDB. UCMDB included in versions 2020.05 and below of Operations Bridge Manager are affected, but this module can probably also be used to exploit...
CVE-2021-22498
XML External Entity Injection vulnerability in Micro Focus Application Lifecycle Management Previously known as Quality Center product. The vulnerability affects versions 12.x, 12.60 Patch 5 and earlier, 15.0.1 Patch 2 and earlier and 15.5. The vulnerability could be exploited to allow an XML...
CVE-2021-22498
XML External Entity Injection vulnerability in Micro Focus Application Lifecycle Management Previously known as Quality Center product. The vulnerability affects versions 12.x, 12.60 Patch 5 and earlier, 15.0.1 Patch 2 and earlier and 15.5. The vulnerability could be exploited to allow an XML...
CVE-2021-22498
XML External Entity Injection vulnerability in Micro Focus Application Lifecycle Management Previously known as Quality Center product. The vulnerability affects versions 12.x, 12.60 Patch 5 and earlier, 15.0.1 Patch 2 and earlier and 15.5. The vulnerability could be exploited to allow an XML...
Xxe
XML External Entity Injection vulnerability in Micro Focus Application Lifecycle Management Previously known as Quality Center product. The vulnerability affects versions 12.x, 12.60 Patch 5 and earlier, 15.0.1 Patch 2 and earlier and 15.5. The vulnerability could be exploited to allow an XML...
CVE-2021-22498
XML External Entity Injection vulnerability in Micro Focus Application Lifecycle Management Previously known as Quality Center product. The vulnerability affects versions 12.x, 12.60 Patch 5 and earlier, 15.0.1 Patch 2 and earlier and 15.5. The vulnerability could be exploited to allow an XML...
CVE-2021-22498
CVE-2021-22498 is an XML External Entity Injection vulnerability affecting Micro Focus Application Lifecycle Management (formerly Quality Center). The issue impacts versions 12.x, 12.60 Patch 5 and earlier, 15.0.1 Patch 2 and earlier, and 15.5. The provided connected documents confirm the vulnera...
Micro Focus ArcSight Logger Remote Code Execution (CVE-2020-11851)
A remote code execution vulnerability exists in Micro Focus ArcSight Logger. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Micro Focus Secure Messaging Gateway Command Injection (CVE-2020-11852)
A command injection vulnerability exists in Micro Focus Secure Messaging Gateway. The vulnerability is due to improper validation of SaveData parameter within managedomainssavedata.json.php...
Micro Focus (Novell) Filr Detection Consolidation
Consolidation of Micro Focus Novell Filr detections. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
CVE-2020-25838
Unauthorized disclosure of sensitive information vulnerability in Micro Focus Filr product. Affecting all 3.x and 4.x versions. The vulnerability could be exploited to disclose unauthorized sensitive information...
CVE-2020-25838
Unauthorized disclosure of sensitive information vulnerability in Micro Focus Filr product. Affecting all 3.x and 4.x versions. The vulnerability could be exploited to disclose unauthorized sensitive information...
Information disclosure
Unauthorized disclosure of sensitive information vulnerability in Micro Focus Filr product. Affecting all 3.x and 4.x versions. The vulnerability could be exploited to disclose unauthorized sensitive information...
CVE-2020-25838
Unauthorized disclosure of sensitive information vulnerability in Micro Focus Filr product. Affecting all 3.x and 4.x versions. The vulnerability could be exploited to disclose unauthorized sensitive information...
CVE-2020-25838
Technical details about CVE-2020-25838 are not publicly available in the provided documents. No specific affected products, versions, vectors, or fixes are disclosed here. Monitor for updates in forthcoming or expanded vendor/security advisories.
Micro Focus Filr product Information Disclosure Vulnerability
Micro Focus Filr is a suite of enterprise-grade file access and sharing solutions from Micro Focus UK. A security vulnerability exists in Micro Focus Filr product that originates from the unauthorized disclosure of sensitive information vulnerability. The vulnerability can be exploited to disclos...
Micro Focus IDOL Cross-Site Scripting Vulnerability
Micro Focus IDOL is an AI engine for text analytics, speech analytics, and video analytics from Micro Focus UK. The product can be used in scenarios such as enterprise search, chatbots, government open source intelligence and unstructured data analysis. A cross-site scripting vulnerability exists...