CVE-2019-18943 XML External Entity processing

Micro Focus Solutions Business Manager versions prior to 11.7.1 are vulnerable to XML External Entity Processing XXE on certain operations...

CVE-2019-18943

CVE-2019-18943 affects Micro Focus Solutions Business Manager (SBM) prior to version 11.7.1, where XML External Entity Processing (XXE) on certain operations creates the vulnerability. Affected product/versions: SBM up to 11.7.0. Root cause: XXE vulnerability in SBM’s XML processing. Impact detai...

CVE-2019-18942 Stored cross site scripting

Micro Focus Solutions Business Manager versions prior to 11.7.1 are vulnerable to stored XSS. The application reflects previously stored user input without encoding...

CVE-2019-18942

Micro Focus Solutions Business Manager (SBM) before version 11.7.1 is vulnerable to stored XSS because the web application reflects stored input without proper encoding. Affected product: SBM (Serena/Micro Focus SBM). Root cause: lack of input encoding leading to client-side script execution. Imp...

CVE-2019-18944

Micro Focus Solutions Business Manager Application Repository versions prior to 11.7.1 are vulnerable to reflected XSS...

CVE-2019-18944

The CVE-2019-18944 affects Micro Focus Solutions Business Manager Application Repository versions prior to 11.7.1 and is described as a reflected XSS vulnerability. Connected sources corroborate the issue as a cross‑site scripting flaw in SBM prior to 11.7.1. The exact exploit details and affecte...

CVE-2019-18945

CVE-2019-18945 affects Micro Focus Solutions Business Manager Application Repository. A privilege escalation vulnerability is present in SBM/Serena SBM versions prior to 11.7.1. Exploitation details are not provided in the supplied documents, but multiple sources confirm the issue, with an explic...

CVE-2019-18945 privilege escalation

Micro Focus Solutions Business Manager Application Repository versions prior to 11.7.1 are vulnerable to privilege escalation vulnerability...

CVE-2019-18947 information disclosure

Micro Focus Solutions Business Manager Application Repository versions prior to 11.7.1 are vulnerable to information disclosure...

CVE-2019-18947

Micro Focus Solutions Business Manager (SBM) Application Repository prior to version 11.7.1 is vulnerable to information disclosure. The issue arises from configuration and operational errors within a networked SBM deployment, allowing an unauthenticated or limited-privilege attacker to obtain se...

CVE-2019-18946 Session fixation

Micro Focus Solutions Business Manager Application Repository versions prior to 11.7.1 are vulnerable to session fixation...

CVE-2019-18946

CVE-2019-18946 concerns Micro Focus Solutions Business Manager (SBM) Application Repository versions prior to 11.7.1 , where a session fixation vulnerability is present. The connected sources corroborate the issue is tied to SBM prior to the 11.7.1 release. Root cause details are limited in the p...

Micro Focus Solutions Business Manager 权限许可和访问控制问题漏洞

Micro Focus Solutions Business Manager SBM, Serena Business Manager is a suite of business process automation management solutions from Micro Focus UK. The product is mainly used for process automation, including software development lifecycle and IT business process management. Micro Focus...

Solutions Business Manager 信息泄露漏洞

Micro Focus Solutions Business Manager SBM, Serena Business Manager is a suite of business process automation management solutions from Micro Focus UK. The product is mainly used for process automation, including software development lifecycle and IT business process management. An information...

Micro Focus Solutions Business Manager 跨站脚本漏洞

Micro Focus Solutions Business Manager SBM, Serena Business Manager is a suite of business process automation management solutions from Micro Focus UK. The product is mainly used for process automation, including software development lifecycle and IT business process management. A cross-site...

Micro Focus Operations Bridge Manager Local Privilege Escalation Exploit

This Metasploit module exploits an insecure permission vulnerability on a folder in Micro Focus Operations Bridge Manager. An unprivileged user such as Guest can drop a JSP file in an exploded WAR directory and then access it without authentication by making a request to the OBM server. This will...

Micro Focus UCMDB Remote Code Execution (CVE-2020-11854; CVE-2020-11853)

A remote code execution vulnerability exists in Micro Focus UCMDB. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Micro Focus Operations Bridge Manager Local Privilege Escalation

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Micro Focus Operations Bridge Manager Local Privilege Escalation', 'Description' = %q This module exploits an incorrectly permissioned folder in...

CVE-2021-22504

Arbitrary code execution vulnerability on Micro Focus Operations Bridge Manager product, affecting versions 10.1x, 10.6x, 2018.05, 2018.11, 2019.05, 2019.11, 2020.05, 2020.10. The vulnerability could allow remote attackers to execute arbitrary code on an OBM server...

CVE-2021-22504

Arbitrary code execution vulnerability on Micro Focus Operations Bridge Manager product, affecting versions 10.1x, 10.6x, 2018.05, 2018.11, 2019.05, 2019.11, 2020.05, 2020.10. The vulnerability could allow remote attackers to execute arbitrary code on an OBM server...