Micro Focus · weakness class
Information Disclosure
17 CVEs
Every dot is a CVE in what this vendor ships; the named ones are the most at risk.
Every one of the 17 is a mark on the map. Named now: 1 to 17, most at risk first.
- MFSBGN03799 rev.1 - Micro Focus UCMDB, Remote Disclosure of Information
- NetIQ Access Manager (NAM) 4.x before 4.0.1 HF3 allows remote authenticated administrators to discover service-account passwords via a request to (1) roma/jsp/volsc/monitoring/dev…
- Information leakage vulnerability in NetIQ eDirectory before 9.1.1 HF1 due to shared memory usage.
- An information leakage exists in Micro Focus NetIQ Self Service Password Reset Software all versions prior to version 4.4. The vulnerability could be exploited to expose sensitive…
- Micro Focus Solutions Business Manager versions prior to 11.4 might reveal certain sensitive information in server log files.
- A vulnerability was discovered in NetIQ Sentinel Server 8.0 before 8.0.1 that may allow leakage of information (account enumeration).
- MFSBGN03829 rev.1 - Micro Focus Operation Bridge Containerized Suite, Remote Code Execution
- MFSBGN03823 rev.1 - Micro Focus Service Manager, unauthorized disclosure of data
- Insertion of Sensitive Information into Log File vulnerability in Micro Focus Secure API Manager (SAPIM) product, affecting version 2.0.0. The vulnerability could lead to sensitiv…
- CVE-2022-38756 vulnerability in GW Web prior to 18.4.2
- Micro Focus Solutions Business Manager versions prior to 11.4 allows a user to invoke SBM RESTful services across domains.
- Solutions Business Manager (SBM) Information Leakage issue in version prior to 11.5
- Information leakage vulnerability in NetIQ Access Manager versions prior to version 4.5.4 and 5.0.1
- Information exposure in Micro Focus Content Manager, versions 9.1, 9.2 and 9.3. This vulnerability when configured to use an Oracle database, allows valid system users to gain acc…
- Class and method names in error message in Micro Focus Service Manager product versions 9.30, 9.31, 9.32, 9.33, 9.34, 9.35, 9.40, 9.41, 9.50, 9.51, 9.52, 9.60, 9.61, 9.62. This vu…
- File existence disclosue vulnerability in IDM plugin
- information disclosure
exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it
Zoom in on the map and the dots under the middle of it are named where they are.
Data as of 2026-11-15. CVE List through 2026-11-15 · EPSS of 2026-11-15 · CISA KEV checked 2026-11-15. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.