File and Path Handling

Every one of the 13 is a mark on the map. Named now: 1 to 13, most at risk first.

1. Path traversal vulnerability in Filr web applicationCVE-2019-3474Micro Focus · CVSS 6.5 · 9.0% likely

   CWE-22

2. MFSBGN03838 rev.1 - UCMDB Configuration Management Service, Multiple VulnerabilitiesCVE-2018-18593Micro Focus · CVSS 6.5 · 8.8% likely

   CWE-22

3. Privileges manipulation in Micro Focus Data Protector, versions 10.00, 10.01, 10.02, 10.03, 10.04, 10.10, 10.20, 10.30, 10.40. This vulnerability could be exploited by a low-privi…CVE-2019-11660Microfocus · 7.8% likely

   CWE-426

4. Directory traversal vulnerability in the set_log_config function in regclnt.dll in unifid.exe in NetIQ Privileged User Manager 2.3.x before 2.3.1 HF2 allows remote authenticated u…CVE-2012-5931Microfocus · 7.3% likely

   CWE-22

5. MFSBGN03824 rev.1 - ArcSight Management Center, Insufficient Access Control, Reflected Cross Site Scripting, Access Control vulnerability, Cross-Site Request Forgery (CSRF), Unaut…CVE-2018-6500Micro Focus · CVSS 7.5 · 4.0% likely

   CWE-22

6. Directory traversal vulnerability in the DumpToFile method in the NQMcsVarSet ActiveX control in Agent Manager in NetIQ Sentinel allows remote attackers to create arbitrary files,…CVE-2014-3460Microfocus · 3.3% likely

   CWE-22

7. A path traversal vulnerability has been identified in Verastream Host IntegratorCVE-2019-11654Micro Focus · CVSS 8.6 · 2.6% likely

   CWE-22

8. Arbitrary File Upload in GroupWise Administration ConsoleCVE-2018-12468Micro Focus · CVSS 9.1 · 2.2% likely

   CWE-434

9. Administrative Server in Micro Focus Host Access Management and Security Server (MSS) and Reflection for the Web (RWeb) and Reflection Security Gateway (RSG) and Reflection ZFE (Z…CVE-2016-5765Microfocus · 2.2% likely

   CWE-22

10. A Path Traversal (CWE-22) vulnerability in esfadmingui in Micro Focus Enterprise Developer and Enterprise Server 2.3, 2.3 Update 1 before Hotfix 8, and 2.3 Update 2 before Hotfix…CVE-2017-7424Micro Focus · 1.8% likely

    CWE-22

11. An unauthenticated file upload vulnerability has been identified in the Web Client component of Micro Focus Content Manager 9.1, 9.2, and 9.3 when configured to use the ADFS authe…CVE-2019-3489Micro Focus · 1.7% likely

    CWE-434

12. An absolute path traversal vulnerability (CWE-36) in Micro Focus Vibe 4.0.2 and earlier allows a remote authenticated attacker to download arbitrary files from the server by submi…CVE-2017-7433Micro Focus · 1.4% likely

    CWE-22

13. A Vulnerability exists on Admin Console where an attacker can upload files to the Admin Console server, and potentially execute them. This impacts NetIQ Access Manager versions 4.…CVE-2018-1342Micro Focus · 1.2% likely

    CWE-434

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.