CVE-2022-38756: Micro Focus Groupwise

Medium severity, CVSS 4.3. EPSS: 0.9% chance of exploitation in the next 30 days.

A vulnerability has been identified in Micro Focus GroupWise Web in versions prior to 18.4.2. The GW Web component makes a request to the Post Office Agent that contains sensitive information in the query parameters that could be logged by any intervening HTTP proxies.

Affected products

• Micro Focus Groupwise: before 18.4.2 (fixed in 18.4.2)

Published 2022-12-16. Last modified 2026-06-17.