Micro Focus Netiq Privileged Access Manager vulnerabilities

2 CVEs affecting Micro Focus Netiq Privileged Access Manager, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2020-11847, published 2024-08-21.

More from Micro Focus.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2020-11846, published 2024-08-21. High severity, CVSS 7.5. EPSS: 0.3% chance of exploitation in the next 30 days. A vulnerability found in OpenText Privileged Access Manager that issues a token. on successful issuance of the token, a cookie gets set that allows unrestricted access to all the application…
• CVE-2020-11847, published 2024-08-21. High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days. SSH authenticated user when access the PAM server can execute an OS command to gain the full system access using bash. This issue affects Privileged Access Manager before 3.7.0.1.