Micro Focus Directory Server

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:microfocus:directory_server:-:*:*:*:*:*:*:*

part: a version: - update: *

VendorMicrofocus (cc324dd9-9ad0-55dc-9b4f-9941987276c3)
ProductDirectory Server (94f6b5a6-9c0e-5b97-b7f1-7d6eeae66ab3)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2017-7421 vulnerable 2026-06-08 05:09:55.902667 Details available
Reflected and stored Cross-Site Scripting (XSS, CWE-79) vulnerabilities in Directory Server (aka Enterprise Server Administration web UI) and ESMAC (aka Enterprise Server Monitor and Control) in Micro Focus Enterprise Developer and Enterprise Server 2.3 and earlier, 2.3 Update 1 before Hotfix 8, and 2.3 Update 2 before Hotfix 9 allow remote authenticated attackers to bypass protection mechanisms (CWE-693) and other security features.
Published: 2017-08-21T15:00:00.000Z
Updated: 2024-09-16T22:34:58.893Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-5187 vulnerable 2026-06-08 05:09:39.288294 Details available
A Cross-Site Request Forgery (CWE-352) vulnerability in Directory Server (aka Enterprise Server Administration web UI) in Micro Focus Enterprise Developer and Enterprise Server 2.3 and earlier, 2.3 Update 1 before Hotfix 8, and 2.3 Update 2 before Hotfix 9 allows remote unauthenticated attackers to view and alter (CWE-275) configuration information and inject OS commands (CWE-78) via forged requests.
Published: 2017-08-21T15:00:00.000Z
Updated: 2024-09-16T22:41:17.504Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.