CVE-2014-3460: Micro Focus Sentinel

Medium severity, CVSS 6.8. EPSS: 3.3% chance of exploitation in the next 30 days.

Directory traversal vulnerability in the DumpToFile method in the NQMcsVarSet ActiveX control in Agent Manager in NetIQ Sentinel allows remote attackers to create arbitrary files, and consequently execute arbitrary code, via a crafted pathname.

Affected products

• Micro Focus Sentinel: affected versions not specified
• Micro Focus Sentinel Agent Manager: affected versions not specified

Published 2014-05-20. Last modified 2026-06-17.