microfocus Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/microfocus/ Sun, 26 Feb 2023 09:11:52 +0000 en-US hourly 1 https://wordpress.org/?v=7.0 https://cvevulnerability.com/wp-content/uploads/2023/02/cropped-Screenshot-2023-02-27-at-3.52.32-PM-32x32.png microfocus Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/microfocus/ 32 32 CVE-2008-7127 https://cvevulnerability.com/cve_vulnerabilities/cve-2008-7127/ Sun, 26 Feb 2023 09:11:52 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2008-7127/ osagent.exe in Borland VisiBroker Smart Agent 08.00.00.C1.03 and earlier allows remote attackers to cause a denial of service (crash) via a crafted packet with a large string length value to UDP port 14000, which triggers a memory allocation failure that is not properly handled.

The post CVE-2008-7127 appeared first on CVE Vulnerability.

]]> osagent.exe in Borland VisiBroker Smart Agent 08.00.00.C1.03 and earlier allows remote attackers to cause a denial of service (crash) via a crafted packet with a large string length value to UDP port 14000, which triggers a memory allocation failure that is not properly handled.

The post CVE-2008-7127 appeared first on CVE Vulnerability.

]]> CVE-2008-7126 https://cvevulnerability.com/cve_vulnerabilities/cve-2008-7126/ Sun, 26 Feb 2023 09:11:52 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2008-7126/ Integer overflow in osagent.exe in Borland VisiBroker Smart Agent 08.00.00.C1.03 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted packet with a large string length value to UDP port 14000, which triggers a heap-based buffer overflow.

The post CVE-2008-7126 appeared first on CVE Vulnerability.

]]> Integer overflow in osagent.exe in Borland VisiBroker Smart Agent 08.00.00.C1.03 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted packet with a large string length value to UDP port 14000, which triggers a heap-based buffer overflow.

The post CVE-2008-7126 appeared first on CVE Vulnerability.

]]> CVE-2018-7687 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-7687/ Sun, 26 Feb 2023 06:51:07 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-7687/ The Micro Focus Client for OES before version 2 SP4 IR8a has a vulnerability that could allow a local attacker to elevate privileges via a buffer overflow in ncfsd.sys.

The post CVE-2018-7687 appeared first on CVE Vulnerability.

]]> The Micro Focus Client for OES before version 2 SP4 IR8a has a vulnerability that could allow a local attacker to elevate privileges via a buffer overflow in ncfsd.sys.

The post CVE-2018-7687 appeared first on CVE Vulnerability.

]]> CVE-2018-6504 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-6504/ Sun, 26 Feb 2023 06:50:44 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-6504/ A potential Cross-Site Request Forgery (CSRF) vulnerability has been identified in ArcSight Management Center (ArcMC) in all versions prior to 2.81. This vulnerability could be exploited to allow for Cross-Site Request Forgery (CSRF).

The post CVE-2018-6504 appeared first on CVE Vulnerability.

]]> A potential Cross-Site Request Forgery (CSRF) vulnerability has been identified in ArcSight Management Center (ArcMC) in all versions prior to 2.81. This vulnerability could be exploited to allow for Cross-Site Request Forgery (CSRF).

The post CVE-2018-6504 appeared first on CVE Vulnerability.

]]> CVE-2018-6499 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-6499/ Sun, 26 Feb 2023 06:50:44 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-6499/ Remote Code Execution in the following products Hybrid Cloud Management Containerized Suite HCM2017.11, HCM2018.02, HCM2018.05, Operations Bridge Containerized Suite 2017.11, 2018.02, 2018.05, Data Center Automation Containerized Suite 2017.01 until 2018.05, Service Management Automation Suite 2017.11, 2018.02, 2018.05, Service Virtualization (SV) with floating licenses using Any version using APLS older than 10.7, Unified Functional Testing (UFT) […]

The post CVE-2018-6499 appeared first on CVE Vulnerability.

]]> Remote Code Execution in the following products Hybrid Cloud Management Containerized Suite HCM2017.11, HCM2018.02, HCM2018.05, Operations Bridge Containerized Suite 2017.11, 2018.02, 2018.05, Data Center Automation Containerized Suite 2017.01 until 2018.05, Service Management Automation Suite 2017.11, 2018.02, 2018.05, Service Virtualization (SV) with floating licenses using Any version using APLS older than 10.7, Unified Functional Testing (UFT) with floating licenses using Any version using APLS older than 10.7, Network Virtualization (NV) with floating licenses using Any version using APLS older than 10.7 and Network Operations Management (NOM) Suite CDF 2017.11, 2018.02, 2018.05 will allow Remote Code Execution.

The post CVE-2018-6499 appeared first on CVE Vulnerability.

]]> CVE-2018-6498 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-6498/ Sun, 26 Feb 2023 06:50:44 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-6498/ Remote Code Execution in the following products Hybrid Cloud Management Containerized Suite HCM2017.11, HCM2018.02, HCM2018.05, Operations Bridge Containerized Suite 2017.11, 2018.02, 2018.05, Data Center Automation Containerized Suite 2017.01 until 2018.05, Service Management Automation Suite 2017.11, 2018.02, 2018.05 and Network Operations Management (NOM) Suite CDF 2017.11, 2018.02, 2018.05 will allow Remote Code Execution.

The post CVE-2018-6498 appeared first on CVE Vulnerability.

]]> Remote Code Execution in the following products Hybrid Cloud Management Containerized Suite HCM2017.11, HCM2018.02, HCM2018.05, Operations Bridge Containerized Suite 2017.11, 2018.02, 2018.05, Data Center Automation Containerized Suite 2017.01 until 2018.05, Service Management Automation Suite 2017.11, 2018.02, 2018.05 and Network Operations Management (NOM) Suite CDF 2017.11, 2018.02, 2018.05 will allow Remote Code Execution.

The post CVE-2018-6498 appeared first on CVE Vulnerability.

]]> CVE-2018-6497 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-6497/ Sun, 26 Feb 2023 06:50:44 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-6497/ Remote Cross-site Request forgery (CSRF) potential has been identified in UCMBD Server version DDM Content Pack V 10.20, 10.21, 10.22, 10.22 CUP7, 10.30, 10.31, 10.32, 10.33, 10.33 CUP2, 11.0 and CMS Server version 2018.05 BACKGROUND which could allow for remote unsafe deserialization and cross-site request forgery (CSRF).

The post CVE-2018-6497 appeared first on CVE Vulnerability.

]]> Remote Cross-site Request forgery (CSRF) potential has been identified in UCMBD Server version DDM Content Pack V 10.20, 10.21, 10.22, 10.22 CUP7, 10.30, 10.31, 10.32, 10.33, 10.33 CUP2, 11.0 and CMS Server version 2018.05 BACKGROUND which could allow for remote unsafe deserialization and cross-site request forgery (CSRF).

The post CVE-2018-6497 appeared first on CVE Vulnerability.

]]> CVE-2018-6495 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-6495/ Sun, 26 Feb 2023 06:50:44 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-6495/ Cross-Site Scripting (XSS) in Micro Focus Universal CMDB, version 10.20, 10.21, 10.22, 10.30, 10.31, 10.32, 10.33, 11.0, CMS, version 4.10, 4.11, 4.12, 4.13, 4.14, 4.15.1 and Micro Focus UCMDB Browser, version 4.10, 4.11, 4.12, 4.13, 4.14, 4.15.1. This vulnerability could be remotely exploited to allow Cross-Site Scripting (XSS).

The post CVE-2018-6495 appeared first on CVE Vulnerability.

]]> Cross-Site Scripting (XSS) in Micro Focus Universal CMDB, version 10.20, 10.21, 10.22, 10.30, 10.31, 10.32, 10.33, 11.0, CMS, version 4.10, 4.11, 4.12, 4.13, 4.14, 4.15.1 and Micro Focus UCMDB Browser, version 4.10, 4.11, 4.12, 4.13, 4.14, 4.15.1. This vulnerability could be remotely exploited to allow Cross-Site Scripting (XSS).

The post CVE-2018-6495 appeared first on CVE Vulnerability.

]]> CVE-2020-9522 https://cvevulnerability.com/cve_vulnerabilities/cve-2020-9522/ Sun, 26 Feb 2023 06:43:46 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2020-9522/ Cross Site Scripting (XSS) vulnerability in Micro Focus ArcSight Enterprise Security Manager (ESM) product, Affecting versions 7.0.x, 7.2 and 7.2.1 . The vulnerabilities could be remotely exploited resulting in Cross-Site Scripting (XSS) or information disclosure.

The post CVE-2020-9522 appeared first on CVE Vulnerability.

]]> Cross Site Scripting (XSS) vulnerability in Micro Focus ArcSight Enterprise Security Manager (ESM) product, Affecting versions 7.0.x, 7.2 and 7.2.1 . The vulnerabilities could be remotely exploited resulting in Cross-Site Scripting (XSS) or information disclosure.

The post CVE-2020-9522 appeared first on CVE Vulnerability.

]]> CVE-2020-25834 https://cvevulnerability.com/cve_vulnerabilities/cve-2020-25834/ Sun, 26 Feb 2023 06:39:51 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2020-25834/ Cross-Site Scripting vulnerability on Micro Focus ArcSight Logger product, affecting version 7.1. The vulnerability could be remotely exploited resulting in Cross-Site Scripting (XSS).

The post CVE-2020-25834 appeared first on CVE Vulnerability.

]]> Cross-Site Scripting vulnerability on Micro Focus ArcSight Logger product, affecting version 7.1. The vulnerability could be remotely exploited resulting in Cross-Site Scripting (XSS).

The post CVE-2020-25834 appeared first on CVE Vulnerability.

]]>