Microfocus Enterprise Developer 2.3
Approved changes feed: RSS · Atom
cpe:2.3:a:microfocus:enterprise_developer:2.3:*:*:*:*:*:*:*
part: a version: 2.3 update: *
| Vendor | Microfocus (cc324dd9-9ad0-55dc-9b4f-9941987276c3) |
|---|---|
| Product | Enterprise Developer (a5e91aa7-d17d-50ac-9b71-2c104c71802c) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2017-7424 |
vulnerable | 2026-06-08 05:09:55.906362 |
Details available
A Path Traversal (CWE-22) vulnerability in esfadmingui in Micro Focus Enterprise Developer and Enterprise Server 2.3, 2.3 Update 1 before Hotfix 8, and 2.3 Update 2 before Hotfix 9 allows remote authenticated users to download arbitrary files from a system running the product, if this component is configured. Note esfadmingui is not enabled by default.
Published: 2017-08-21T15:00:00.000Z
Updated: 2024-09-16T20:36:27.999Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-7423 |
vulnerable | 2026-06-08 05:09:55.905800 |
Details available
A Cross-Site Request Forgery (CWE-352) vulnerability in esfadmingui in Micro Focus Enterprise Developer and Enterprise Server 2.3, 2.3 Update 1 before Hotfix 8, and 2.3 Update 2 before Hotfix 9 allows remote unauthenticated attackers to forge requests, if this component is configured. This includes creating new privileged credentials, resulting in privilege elevation (CWE-275). Note esfadmingui is not enabled by default.
Published: 2017-08-21T15:00:00.000Z
Updated: 2024-09-16T17:23:07.673Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-7422 |
vulnerable | 2026-06-08 05:09:55.903238 |
Details available
Reflected and stored Cross-Site Scripting (XSS, CWE-79) vulnerabilities in esfadmingui in Micro Focus Enterprise Developer and Enterprise Server 2.3, 2.3 Update 1 before Hotfix 8, and 2.3 Update 2 before Hotfix 9 allow remote authenticated attackers to bypass protection mechanisms (CWE-693) and other security features, if this component is configured. Note esfadmingui is not enabled by default.
Published: 2017-08-21T15:00:00.000Z
Updated: 2024-09-17T00:32:17.915Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-7421 |
vulnerable | 2026-06-08 05:09:55.902716 |
Details available
Reflected and stored Cross-Site Scripting (XSS, CWE-79) vulnerabilities in Directory Server (aka Enterprise Server Administration web UI) and ESMAC (aka Enterprise Server Monitor and Control) in Micro Focus Enterprise Developer and Enterprise Server 2.3 and earlier, 2.3 Update 1 before Hotfix 8, and 2.3 Update 2 before Hotfix 9 allow remote authenticated attackers to bypass protection mechanisms (CWE-693) and other security features.
Published: 2017-08-21T15:00:00.000Z
Updated: 2024-09-16T22:34:58.893Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-7420 |
vulnerable | 2026-06-08 05:09:55.897874 |
Details available
An Authentication Bypass (CWE-287) vulnerability in ESMAC (aka Enterprise Server Monitor and Control) in Micro Focus Enterprise Developer and Enterprise Server 2.3 and earlier, 2.3 Update 1 before Hotfix 8, and 2.3 Update 2 before Hotfix 9 allows remote unauthenticated attackers to view and alter configuration information and alter the state of the running product (CWE-275).
Published: 2017-08-21T15:00:00.000Z
Updated: 2024-09-16T20:21:20.390Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-5187 |
vulnerable | 2026-06-08 05:09:39.289022 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.