Version < 11.7.1

CVE-2019-18943

Micro Focus Solutions Business Manager versions prior to 11.7.1 are vulnerable to XML External Entity Processing (XXE) on certain operations.

MEDIUM CVSS 6.1 Published Feb 26, 2021

CVE-2019-18942

Micro Focus Solutions Business Manager versions prior to 11.7.1 are vulnerable to stored XSS. The application reflects previously stored user input without encoding.

MEDIUM CVSS 5.5 Published Feb 26, 2021

CVE-2019-18944

Micro Focus Solutions Business Manager Application Repository versions prior to 11.7.1 are vulnerable to reflected XSS.

MEDIUM CVSS 4.9 Published Feb 26, 2021

CVE-2019-18945

Micro Focus Solutions Business Manager Application Repository versions prior to 11.7.1 are vulnerable to privilege escalation vulnerability.

HIGH CVSS 7.3 Published Feb 26, 2021

CVE-2019-18947

Micro Focus Solutions Business Manager Application Repository versions prior to 11.7.1 are vulnerable to information disclosure.

LOW CVSS 3.5 Published Feb 26, 2021

CVE-2019-18946

Micro Focus Solutions Business Manager Application Repository versions prior to 11.7.1 are vulnerable to session fixation.

MEDIUM CVSS 4.8 Published Feb 26, 2021