Enterprise Server
Approved changes feed: RSS · Atom
cpe:2.3:a:microfocus:enterprise_server:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Microfocus (cc324dd9-9ad0-55dc-9b4f-9941987276c3) |
|---|---|
| Product | Enterprise Server (7d801552-35b4-58a2-9abf-4efea341ec11) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2020-9523 |
vulnerable | 2026-06-08 05:28:02.203513 |
Details available
Insufficiently protected credentials vulnerability on Micro Focus enterprise developer and enterprise server, affecting all version prior to 4.0 Patch Update 16, and version 5.0 Patch Update 6. The vulnerability could allow an attacker to transmit hashed credentials for the user account running the Micro Focus Directory Server (MFDS) to an arbitrary site, compromising that account's security.
Published: 2020-04-17T14:18:04.000Z
Updated: 2024-08-04T10:34:38.203Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-12469 |
vulnerable | 2026-06-08 05:10:41.614476 |
Details available
Incorrect handling of an invalid value for an HTTP request parameter by Directory Server (aka Enterprise Server Administration web UI) in Micro Focus Enterprise Developer and Enterprise Server 2.3 Update 2 and earlier, 3.0 before Patch Update 12, and 4.0 before Patch Update 2 causes a null pointer dereference (CWE-476) and subsequent denial of service due to process termination.
Published: 2018-10-12T13:00:00.000Z
Updated: 2024-09-16T19:46:30.802Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-7421 |
vulnerable | 2026-06-08 05:09:55.902783 |
Details available
Reflected and stored Cross-Site Scripting (XSS, CWE-79) vulnerabilities in Directory Server (aka Enterprise Server Administration web UI) and ESMAC (aka Enterprise Server Monitor and Control) in Micro Focus Enterprise Developer and Enterprise Server 2.3 and earlier, 2.3 Update 1 before Hotfix 8, and 2.3 Update 2 before Hotfix 9 allow remote authenticated attackers to bypass protection mechanisms (CWE-693) and other security features.
Published: 2017-08-21T15:00:00.000Z
Updated: 2024-09-16T22:34:58.893Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-7420 |
vulnerable | 2026-06-08 05:09:55.899429 |
Details available
An Authentication Bypass (CWE-287) vulnerability in ESMAC (aka Enterprise Server Monitor and Control) in Micro Focus Enterprise Developer and Enterprise Server 2.3 and earlier, 2.3 Update 1 before Hotfix 8, and 2.3 Update 2 before Hotfix 9 allows remote unauthenticated attackers to view and alter configuration information and alter the state of the running product (CWE-275).
Published: 2017-08-21T15:00:00.000Z
Updated: 2024-09-16T20:21:20.390Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-5187 |
vulnerable | 2026-06-08 05:09:39.291071 |
Details available
A Cross-Site Request Forgery (CWE-352) vulnerability in Directory Server (aka Enterprise Server Administration web UI) in Micro Focus Enterprise Developer and Enterprise Server 2.3 and earlier, 2.3 Update 1 before Hotfix 8, and 2.3 Update 2 before Hotfix 9 allows remote unauthenticated attackers to view and alter (CWE-275) configuration information and inject OS commands (CWE-78) via forged requests.
Published: 2017-08-21T15:00:00.000Z
Updated: 2024-09-16T22:41:17.504Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.