CVE
Vendors
Products
Updated
CVSS v2
CVSS v3
Filr, Accurev, Acutoweb, Application_automation_tools, Application_lifecycle_management, Application_performance_management, Arcsight_enterprise_security_manager, Arcsight_enterprise_security_manager_express, Arcsight_logger, Arcsight_management_center
2021-07-21
N/A
9.8 CRITICAL
Remote arbitrary code execution in Micro Focus Data Protector, version 10.03 this vulnerability could allow remote arbitrary code execution.
Filr, Accurev, Acutoweb, Application_automation_tools, Application_lifecycle_management, Application_performance_management, Arcsight_enterprise_security_manager, Arcsight_enterprise_security_manager_express, Arcsight_logger, Arcsight_management_center
2021-05-12
N/A
7.8 HIGH
A local privilege escalation vulnerability in the famtd component of Micro Focus Filr 3.0 allows a local attacker authenticated as a low privilege user to escalate to root. This vulnerability affects all versions of Filr 3.x prior to Security Update 6.
Filr, Accurev, Acutoweb, Application_automation_tools, Application_lifecycle_management, Application_performance_management, Arcsight_enterprise_security_manager, Arcsight_enterprise_security_manager_express, Arcsight_logger, Arcsight_management_center
2021-05-12
N/A
6.5 MEDIUM
A path traversal vulnerability in the web application component of Micro Focus Filr 3.x allows a remote attacker authenticated as a low privilege user to download arbitrary files from the Filr server. This vulnerability affects all versions of Filr 3.x prior to Security Update 6.
** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2019. Notes: none.
** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2019. Notes: none.
** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2019. Notes: none.
** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2019. Notes: none.
** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2019. Notes: none.
** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2019. Notes: none.
Debian-edu-config all versions < 2.11.10, a set of configuration files used for Debian Edu, and debian-lan-config < 0.26, configured too permissive ACLs for the Kerberos admin server, which allowed password changes for other Kerberos user principals.