CVE
Vendors
Products
Updated
CVSS v2
CVSS v3
Unvalidated redirect vulnerability in in NetIQ eDirectory before 9.1.1 HF1.
A potential Remote Unauthorized Access in Micro Focus Fortify Software Security Center (SSC), versions 17.10, 17.20, 18.10 this exploitation could allow Remote Unauthorized Access
A potential Remote Unauthorized Access in Micro Focus Fortify Software Security Center (SSC), versions 17.10, 17.20, 18.10 this exploitation could allow Remote Unauthorized Access
Lack of permission checks in the InitializeDevelPackage function in openSUSE Open Build Service before 2.9.3 allowed authenticated users to modify packages where they do not have write permissions.
A missing permission check in the review handling of openSUSE Open Build Service before 2.9.3 allowed all authenticated users to modify sources in projects where they do not have write permissions.
Filr, Accurev, Acutoweb, Application_automation_tools, Application_lifecycle_management, Application_performance_management, Arcsight_enterprise_security_manager, Arcsight_enterprise_security_manager_express, Arcsight_logger, Arcsight_management_center
2019-10-09
N/A
7.8 HIGH
The Micro Focus Client for OES before version 2 SP4 IR8a has a vulnerability that could allow a local attacker to elevate privileges via a buffer overflow in ncfsd.sys.
Information leakage vulnerability in NetIQ eDirectory before 9.1.1 HF1 due to shared memory usage.
2019-10-09
N/A
7.8 HIGH
The decoupled download and installation steps in libzypp before 17.5.0 could lead to a corrupted RPM being left in the cache, where a later call would not display the corrupted RPM warning and allow installation, a problem caused by malicious warnings only displayed during download.
Micro Focus Solutions Business Manager versions prior to 11.4 might reveal certain sensitive information in server log files.
Micro Focus Solutions Business Manager versions prior to 11.4 allows a user to invoke SBM RESTful services across domains.