Micro Focus Enterprise Server Monitor And Control vulnerabilities

3 CVEs affecting Micro Focus Enterprise Server Monitor And Control, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2017-7421, published 2017-08-21.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2017-7420, published 2017-08-21. Critical severity, CVSS 9.8. EPSS: 2.4% chance of exploitation in the next 30 days. An Authentication Bypass (CWE-287) vulnerability in ESMAC (aka Enterprise Server Monitor and Control) in Micro Focus Enterprise Developer and Enterprise Server 2.3 and earlier, 2.3 Update 1 before…
CVE-2017-7421, published 2017-08-21. Medium severity, CVSS 6.1. EPSS: 1.3% chance of exploitation in the next 30 days. Reflected and stored Cross-Site Scripting (XSS, CWE-79) vulnerabilities in Directory Server (aka Enterprise Server Administration web UI) and ESMAC (aka Enterprise Server Monitor and Control) in…
CVE-2017-5187, published 2017-08-21. High severity, CVSS 8.8. EPSS: 0.8% chance of exploitation in the next 30 days. A Cross-Site Request Forgery (CWE-352) vulnerability in Directory Server (aka Enterprise Server Administration web UI) in Micro Focus Enterprise Developer and Enterprise Server 2.3 and earlier, 2.3…