Microfocus Identity Manager — known CVE vulnerabilities

Every CVE whose affected-product data names Microfocus Identity Manager, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (3)

• CVE-2020-11849 — CVSS 9.8 (critical): Elevation of privilege and/or unauthorized access vulnerability in Micro Focus Identity Manager. Affecting versions prior to 4.7.3 and…
• CVE-2020-25839 — CVSS 9.8 (critical): NetIQ Identity Manager 4.8 prior to version 4.8 SP2 HF1 are affected by an injection vulnerability. This vulnerability is fixed in NetIQ…
• CVE-2016-1600 — CVSS 7.5 (high): The ServiceNow driver in NetIQ Identity Manager versions prior to 4.6 are susceptible to an information disclosure vulnerability.