Micro Focus Project And Portfolio Management vulnerabilities

3 CVEs affecting Micro Focus Project And Portfolio Management, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2017-8993, published 2018-02-15.

More from Micro Focus.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2017-14361, published 2017-12-13. High severity, CVSS 7.4. EPSS: 1% chance of exploitation in the next 30 days. Man-In-The-Middle vulnerability in Micro Focus Project and Portfolio Management Center, version 9.32. This vulnerability could be exploited to allow a Man-in-the-middle attack.
• CVE-2017-8993, published 2018-02-15. Medium severity, CVSS 5.4. EPSS: 0.8% chance of exploitation in the next 30 days. A Remote Cross-Site Scripting vulnerability in HPE Project and Portfolio Management (PPM) version v9.30, v9.31, v9.32, v9.40 was found.
• CVE-2017-14362, published 2017-12-13. High severity, CVSS 7.3. EPSS: 0.5% chance of exploitation in the next 30 days. Cross-Site Request Forgery vulnerability in Micro Focus Project and Portfolio Management Center, version 9.32. This vulnerability could be exploited to allow a Cross-Site Forgery attack.