CVE-2019-11654: Micro Focus Verastream Host Integrator

High severity, CVSS 7.5. EPSS: 2.6% chance of exploitation in the next 30 days.

Path traversal vulnerability in Micro Focus Verastream Host Integrator (VHI), versions 7.7 SP2 and earlier, The vulnerability allows remote unauthenticated attackers to read arbitrary files.

Affected products

  • Micro Focus Verastream Host Integrator: version 7.5 only; version 7.6 only; version 7.7 only

Published 2019-08-23. Last modified 2026-06-17.