Skip to content

Micro Focus · weakness class

Information Disclosure

17 CVEs

Every dot is a CVE in what this vendor ships; the named ones are the most at risk.

Every one of the 17 is a mark on the map. Named now: 1 to 17, most at risk first.

  1. MFSBGN03799 rev.1 - Micro Focus UCMDB, Remote Disclosure of InformationCVE-2018-6487Micro Focus · CVSS 9.8 · 1.9% likely

    CWE-200

  2. NetIQ Access Manager (NAM) 4.x before 4.0.1 HF3 allows remote authenticated administrators to discover service-account passwords via a request to (1) roma/jsp/volsc/monitoring/dev…CVE-2014-5215Microfocus · 1.8% likely

    CWE-200

  3. Information leakage vulnerability in NetIQ eDirectory before 9.1.1 HF1 due to shared memory usage.CVE-2018-7686Micro Focus · 1.4% likely

    CWE-200

  4. An information leakage exists in Micro Focus NetIQ Self Service Password Reset Software all versions prior to version 4.4. The vulnerability could be exploited to expose sensitive…CVE-2019-11648Micro Focus · 1.1% likely

    CWE-200

  5. Micro Focus Solutions Business Manager versions prior to 11.4 might reveal certain sensitive information in server log files.CVE-2018-7683Micro Focus · 1.1% likely

    CWE-532

  6. A vulnerability was discovered in NetIQ Sentinel Server 8.0 before 8.0.1 that may allow leakage of information (account enumeration).CVE-2017-5184Microfocus · 1.0% likely

    CWE-200

  7. MFSBGN03829 rev.1 - Micro Focus Operation Bridge Containerized Suite, Remote Code ExecutionCVE-2018-18590Micro Focus · CVSS 9.6 · 1.0% likely

    CWE-200

  8. MFSBGN03823 rev.1 - Micro Focus Service Manager, unauthorized disclosure of dataCVE-2018-18591Micro Focus · CVSS 6.8 · 1.0% likely

    CWE-200

  9. Insertion of Sensitive Information into Log File vulnerability in Micro Focus Secure API Manager (SAPIM) product, affecting version 2.0.0. The vulnerability could lead to sensitiv…CVE-2021-22516Microfocus · 1.0% likely

    CWE-532

  10. CVE-2022-38756 vulnerability in GW Web prior to 18.4.2CVE-2022-38756Micro Focus · CVSS 4.3 · 0.9% likely

    CWE-532

  11. Micro Focus Solutions Business Manager versions prior to 11.4 allows a user to invoke SBM RESTful services across domains.CVE-2018-7682Micro Focus · 0.8% likely

    CWE-532

  12. Solutions Business Manager (SBM) Information Leakage issue in version prior to 11.5CVE-2018-19643Micro Focus · CVSS 4.7 · 0.8% likely

    CWE-200

  13. Information leakage vulnerability in NetIQ Access Manager versions prior to version 4.5.4 and 5.0.1CVE-2021-22527Micro Focus · CVSS 6 · 0.7% likely

    CWE-200

  14. Information exposure in Micro Focus Content Manager, versions 9.1, 9.2 and 9.3. This vulnerability when configured to use an Oracle database, allows valid system users to gain acc…CVE-2019-11658Micro Focus · 0.7% likely

    CWE-200

  15. Class and method names in error message in Micro Focus Service Manager product versions 9.30, 9.31, 9.32, 9.33, 9.34, 9.35, 9.40, 9.41, 9.50, 9.51, 9.52, 9.60, 9.61, 9.62. This vu…CVE-2019-11662Micro Focus · 0.7% likely

    CWE-209

  16. File existence disclosue vulnerability in IDM pluginCVE-2022-26329Micro Focus · CVSS 1.8 · 0.5% likely

    CWE-538

  17. information disclosureCVE-2019-18947Micro Focus · CVSS 3.5 · 0.3% likely

    CWE-200

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-15. CVE List through 2026-11-15 · EPSS of 2026-11-15 · CISA KEV checked 2026-11-15. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.