Vulnerabilities (CVE)

Filtered by vendor Microfocus Subscribe
Total 263 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2020-11847 1 Microfocus 1 Netiq Privileged Access Manager 2024-08-23 N/A 7.8 HIGH
SSH authenticated user when access the PAM server can execute an OS command to gain the full system access using bash. This issue affects Privileged Access Manager before 3.7.0.1.
CVE-2020-11846 1 Microfocus 1 Netiq Privileged Access Manager 2024-08-23 N/A 7.5 HIGH
A vulnerability found in OpenText Privileged Access Manager that issues a token. on successful issuance of the token, a cookie gets set that allows unrestricted access to all the application resources. This issue affects Privileged Access Manager before 3.7.0.1.
CVE-2020-11850 1 Microfocus 1 Netiq Self Service Password Reset 2024-08-23 N/A 6.1 MEDIUM
Improper Input Validation vulnerability in OpenText Self Service Password Reset allows Cross-Site Scripting (XSS). This issue affects Self Service Password Reset before 4.5.0.2 and 4.4.0.6