microfocus solutions business manager

Name: microfocus solutions business manager
Brand: microfocus

productUS

cpe:2.3:a:microfocus:solutions_business_manager:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

public exploit

EPSS ≥ 10%

unpatched

by severity

3critical5high8medium1low

updated 2026-10-29

vulnerabilities (17)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2018-7679US	critical9.8	2.31% (83rd)	—	11.4	2018-06-21	< 11.4
CVE-2018-19641US	critical9.8	1.50% (74th)	—	11.5	2019-03-27	< 11.5
CVE-2018-19645US	critical9.8	1.42% (73rd)	—	11.5	2019-02-12	< 11.5
CVE-2018-7683US	high7.5	1.11% (66th)	—	11.4	2018-06-21	< 11.4
CVE-2018-7682US	medium6.5	0.84% (58th)	—	11.4	2018-06-22	< 11.4
CVE-2018-19643US	high7.5	0.80% (56th)	—	11.5	2019-03-27	< 11.5
CVE-2018-19642US	high7.5	0.70% (53rd)	—	11.5	2019-03-27	< 11.5
CVE-2019-3477US	medium6.1	0.65% (51st)	—	11.4.2	2019-06-07	< 11.4.2
CVE-2018-7680US	medium6.1	0.65% (51st)	—	11.4	2018-06-21	< 11.4
CVE-2019-18943US	high8.0	0.61% (49th)	—	11.7.1	2021-02-26	< 11.7.1
CVE-2019-18945US	high8.0	0.55% (46th)	—	11.7.1	2021-02-26	< 11.7.1
CVE-2018-19644US	medium6.1	0.51% (44th)	—	11.5	2019-03-27	< 11.5
CVE-2018-7681US	medium4.8	0.51% (44th)	—	11.4	2018-06-21	< 11.4
CVE-2019-18947US	low3.5	0.34% (28th)	—	11.7.1	2021-02-26	< 11.7.1
CVE-2019-18944US	medium4.8	0.32% (24th)	—	11.7.1	2021-02-26	< 11.7.1
CVE-2019-18942US	medium4.8	0.32% (24th)	—	11.7.1	2021-02-26	< 11.7.1
CVE-2019-18946US	medium4.8	0.26% (18th)	—	11.7.1	2021-02-26	< 11.7.1

The flaw types (CWEs) most of these CVEs share.

CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')5 CVEs
CWE-20Improper Input Validation2 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor2 CVEs
CWE-532Insertion of Sensitive Information into Log File2 CVEs
CWE-209Generation of Error Message Containing Sensitive Information1 CVEs
CWE-264CWE-2641 CVEs
CWE-287Improper Authentication1 CVEs
CWE-384Session Fixation1 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.