Micro Focus Identity Manager vulnerabilities

3 CVEs affecting Micro Focus Identity Manager, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2020-25839, published 2020-11-20.

More from Micro Focus.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2020-25839, published 2020-11-20. Critical severity, CVSS 9.8. EPSS: 1.2% chance of exploitation in the next 30 days. NetIQ Identity Manager 4.8 prior to version 4.8 SP2 HF1 are affected by an injection vulnerability. This vulnerability is fixed in NetIQ IdM 4.8 SP2 HF1.
• CVE-2020-11849, published 2020-07-08. Critical severity, CVSS 9.8. EPSS: 1.2% chance of exploitation in the next 30 days. Elevation of privilege and/or unauthorized access vulnerability in Micro Focus Identity Manager. Affecting versions prior to 4.7.3 and 4.8.1 hot fix 1. The vulnerability could allow information…
• CVE-2016-1600, published 2019-05-09. High severity, CVSS 7.5. EPSS: 1.1% chance of exploitation in the next 30 days. The ServiceNow driver in NetIQ Identity Manager versions prior to 4.6 are susceptible to an information disclosure vulnerability.