Micro Focus Rumba vulnerabilities

3 CVEs affecting Micro Focus Rumba, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2016-9176, published 2016-11-04.

More from Micro Focus.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2016-1606, published 2016-07-03. Critical severity, CVSS 9.8. EPSS: 45.6% chance of exploitation in the next 30 days. Multiple stack-based buffer overflows in COM objects in Micro Focus Rumba 9.4.x before 9.4 HF 13960 allow remote attackers to execute arbitrary code via (1) the NetworkName property value to…
• CVE-2016-5228, published 2016-07-03. Critical severity, CVSS 9.8. EPSS: 15.1% chance of exploitation in the next 30 days. Stack-based buffer overflow in the PlayMacro function in ObjectXMacro.ObjectXMacro in WdMacCtl.ocx in Micro Focus Rumba 9.x before 9.3 HF 11997 and 9.4.x before 9.4 HF 12815 allows remote attackers…
• CVE-2016-9176, published 2016-11-04. Critical severity, CVSS 9.8. EPSS: 2.8% chance of exploitation in the next 30 days. Stack buffer overflow in the send.exe and receive.exe components of Micro Focus Rumba 9.4 and earlier could be used by local attackers or attackers able to inject arguments to these binaries to…