Micro Focus Groupwise vulnerabilities

2 CVEs affecting Micro Focus Groupwise, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2022-38756, published 2022-12-16.

More from Micro Focus.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2018-12468, published 2018-08-01. High severity, CVSS 7.2. EPSS: 2.2% chance of exploitation in the next 30 days. A vulnerability in the administration console of Micro Focus GroupWise prior to version 18.0.2 may allow a remote attacker authenticated as an administrator to upload files to an arbitrary path on…
• CVE-2022-38756, published 2022-12-16. Medium severity, CVSS 4.3. EPSS: 0.9% chance of exploitation in the next 30 days. A vulnerability has been identified in Micro Focus GroupWise Web in versions prior to 18.4.2. The GW Web component makes a request to the Post Office Agent that contains sensitive information in the…