Micro Focus Directory Server vulnerabilities

2 CVEs affecting Micro Focus Directory Server, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2017-7421, published 2017-08-21.

More from Micro Focus.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2017-7421, published 2017-08-21. Medium severity, CVSS 6.1. EPSS: 1.3% chance of exploitation in the next 30 days. Reflected and stored Cross-Site Scripting (XSS, CWE-79) vulnerabilities in Directory Server (aka Enterprise Server Administration web UI) and ESMAC (aka Enterprise Server Monitor and Control) in…
• CVE-2017-5187, published 2017-08-21. High severity, CVSS 8.8. EPSS: 0.8% chance of exploitation in the next 30 days. A Cross-Site Request Forgery (CWE-352) vulnerability in Directory Server (aka Enterprise Server Administration web UI) in Micro Focus Enterprise Developer and Enterprise Server 2.3 and earlier, 2.3…