VulnerabilityModified

CVE-2020-9519

HTTP methods reveled in Web services vulnerability in Micro Focus Service manager (server), affecting versions 9.40, 9.41, 9.50, 9.51, 9.52, 9.60, 9.61, 9.62, 9.63.

MEDIUM 5.3EPSS 0.86%

Does this matter?

Lower severity and a low EPSS score (0.86%). Track it; it rarely justifies an emergency change on its own.

Description

HTTP methods reveled in Web services vulnerability in Micro Focus Service manager (server), affecting versions 9.40, 9.41, 9.50, 9.51, 9.52, 9.60, 9.61, 9.62, 9.63. The vulnerability could be exploited to allow exposure of configuration data.

CVSS 3.1: 5.3 MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
EPSS: 0.86% probability · 57th percentile
CISA KEV: Not listed
Affected: microfocus/service manager
Source: security@opentext.com

References

https://softwaresupport.softwaregrp.com/doc/KM03607789
https://softwaresupport.softwaregrp.com/doc/KM03607789

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.