Micro Focus Sentinel vulnerabilities

4 CVEs affecting Micro Focus Sentinel, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2018-7675, published 2018-03-07.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2014-3460, published 2014-05-20. Medium severity, CVSS 6.8. EPSS: 3.3% chance of exploitation in the next 30 days. Directory traversal vulnerability in the DumpToFile method in the NQMcsVarSet ActiveX control in Agent Manager in NetIQ Sentinel allows remote attackers to create arbitrary files, and consequently…
CVE-2017-5185, published 2017-03-30. High severity, CVSS 7.5. EPSS: 1.7% chance of exploitation in the next 30 days. A vulnerability was discovered in NetIQ Sentinel Server 8.0 before 8.0.1 that may allow remote denial of service.
CVE-2017-5184, published 2017-03-30. Medium severity, CVSS 5.3. EPSS: 1% chance of exploitation in the next 30 days. A vulnerability was discovered in NetIQ Sentinel Server 8.0 before 8.0.1 that may allow leakage of information (account enumeration).
CVE-2018-7675, published 2018-03-07. Medium severity, CVSS 5.3. EPSS: 0.5% chance of exploitation in the next 30 days. In NetIQ Sentinel before 8.1.x, a Sentinel user is logged into the Sentinel Web Interface. After performing some tasks within Sentinel the user does not log out but does go idle for a period of time.…