[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fUfOmIy7IeJkO3FdQcATs08WtDvIbWJvI4e3rUEDdq-A":3,"g5a-ex:microfocus\u002Fenterprise_developer@*":131,"g5a-family:microfocus\u002Fenterprise_developer":133},{"success":4,"data":5},true,{"product":6,"versions":42,"topVulnerabilitiesByEpss":54,"kevVulnerabilities":109,"seoMetadata":110,"meta":129},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":41},"microfocus","enterprise_developer",11,12,0,"2023-09-12",[14,17,19,21,24,27,30,32,35,37,39],{"version":15,"cve_count":11,"kev_count":11,"has_kev":16},"2.0",false,{"version":18,"cve_count":11,"kev_count":11,"has_kev":16},"2.1",{"version":20,"cve_count":11,"kev_count":11,"has_kev":16},"2.2",{"version":22,"cve_count":23,"kev_count":11,"has_kev":16},"2.3",7,{"version":25,"cve_count":26,"kev_count":11,"has_kev":16},"3.0",2,{"version":28,"cve_count":29,"kev_count":11,"has_kev":16},"4.0",3,{"version":31,"cve_count":29,"kev_count":11,"has_kev":16},"5.0",{"version":33,"cve_count":34,"kev_count":11,"has_kev":16},"6.0",1,{"version":36,"cve_count":26,"kev_count":11,"has_kev":16},"7.0",{"version":38,"cve_count":26,"kev_count":11,"has_kev":16},"8.0",{"version":40,"cve_count":34,"kev_count":11,"has_kev":16},"9.0","Enterprise Developer by Microfocus is a technology product with 11 tracked versions and 12 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[43,44,45,46,47,48,49,50,51,52,53],{"version":15,"cve_count":11,"kev_count":11,"has_kev":16},{"version":18,"cve_count":11,"kev_count":11,"has_kev":16},{"version":20,"cve_count":11,"kev_count":11,"has_kev":16},{"version":22,"cve_count":23,"kev_count":11,"has_kev":16},{"version":25,"cve_count":26,"kev_count":11,"has_kev":16},{"version":28,"cve_count":29,"kev_count":11,"has_kev":16},{"version":31,"cve_count":29,"kev_count":11,"has_kev":16},{"version":33,"cve_count":34,"kev_count":11,"has_kev":16},{"version":36,"cve_count":26,"kev_count":11,"has_kev":16},{"version":38,"cve_count":26,"kev_count":11,"has_kev":16},{"version":40,"cve_count":34,"kev_count":11,"has_kev":16},[55,63,69,74,81,86,93,98,102,106],{"cveId":56,"description":57,"publishedDate":58,"cvssScore":59,"cvssVersion":60,"severity":61,"isKev":16,"epssScore":62},"CVE-2017-7420","An Authentication Bypass (CWE-287) vulnerability in ESMAC (aka Enterprise Server Monitor and Control) in Micro Focus Enterprise Developer and Enterprise Server 2.3 and earlier, 2.3 Update 1 before Hotfix 8, and 2.3 Update 2 before Hotfix 9 allows remote unauthenticated attackers to view and alter configuration information and alter the state of the running product (CWE-275).","2017-08-21",9.8,"v3.0","Critical",0.02444,{"cveId":64,"description":65,"publishedDate":58,"cvssScore":66,"cvssVersion":60,"severity":67,"isKev":16,"epssScore":68},"CVE-2017-7424","A Path Traversal (CWE-22) vulnerability in esfadmingui in Micro Focus Enterprise Developer and Enterprise Server 2.3, 2.3 Update 1 before Hotfix 8, and 2.3 Update 2 before Hotfix 9 allows remote authenticated users to download arbitrary files from a system running the product, if this component is configured. Note esfadmingui is not enabled by default.",6.5,"Medium",0.01785,{"cveId":70,"description":71,"publishedDate":58,"cvssScore":72,"cvssVersion":60,"severity":67,"isKev":16,"epssScore":73},"CVE-2017-7421","Reflected and stored Cross-Site Scripting (XSS, CWE-79) vulnerabilities in Directory Server (aka Enterprise Server Administration web UI) and ESMAC (aka Enterprise Server Monitor and Control) in Micro Focus Enterprise Developer and Enterprise Server 2.3 and earlier, 2.3 Update 1 before Hotfix 8, and 2.3 Update 2 before Hotfix 9 allow remote authenticated attackers to bypass protection mechanisms (CWE-693) and other security features.",6.1,0.01259,{"cveId":75,"description":76,"publishedDate":77,"cvssScore":78,"cvssVersion":60,"severity":79,"isKev":16,"epssScore":80},"CVE-2018-12469","Incorrect handling of an invalid value for an HTTP request parameter by Directory Server (aka Enterprise Server Administration web UI) in Micro Focus Enterprise Developer and Enterprise Server 2.3 Update 2 and earlier, 3.0 before Patch Update 12, and 4.0 before Patch Update 2 causes a null pointer dereference (CWE-476) and subsequent denial of service due to process termination.","2018-10-12",7.5,"High",0.01054,{"cveId":82,"description":83,"publishedDate":58,"cvssScore":84,"cvssVersion":60,"severity":67,"isKev":16,"epssScore":85},"CVE-2017-7422","Reflected and stored Cross-Site Scripting (XSS, CWE-79) vulnerabilities in esfadmingui in Micro Focus Enterprise Developer and Enterprise Server 2.3, 2.3 Update 1 before Hotfix 8, and 2.3 Update 2 before Hotfix 9 allow remote authenticated attackers to bypass protection mechanisms (CWE-693) and other security features, if this component is configured. Note esfadmingui is not enabled by default.",5.4,0.0097,{"cveId":87,"description":88,"publishedDate":89,"cvssScore":90,"cvssVersion":91,"severity":79,"isKev":16,"epssScore":92},"CVE-2020-9523","Insufficiently protected credentials vulnerability on Micro Focus enterprise developer and enterprise server, affecting all version prior to 4.0 Patch Update 16, and version 5.0 Patch Update 6. The vulnerability could allow an attacker to transmit hashed credentials for the user account running the Micro Focus Directory Server (MFDS) to an arbitrary site, compromising that account's security.","2020-04-17",8.8,"v3.1",0.00861,{"cveId":94,"description":95,"publishedDate":96,"cvssScore":72,"cvssVersion":91,"severity":67,"isKev":16,"epssScore":97},"CVE-2019-11651","Reflected XSS on Micro Focus Enterprise Developer and Enterprise Server, all versions prior to version 3.0 Patch Update 20, version 4.0 Patch Update 12, and version 5.0 Patch Update 2. The vulnerability could be exploited to redirect a user to a malicious page or forge certain types of web requests.","2019-10-02",0.00785,{"cveId":99,"description":100,"publishedDate":12,"cvssScore":59,"cvssVersion":91,"severity":61,"isKev":16,"epssScore":101},"CVE-2023-4501","User authentication with username and password credentials is ineffective in OpenText (Micro Focus) Visual COBOL, COBOL Server, Enterprise Developer, and Enterprise Server (including product variants such as Enterprise Test Server), versions 7.0 patch updates 19 and 20, 8.0 patch updates 8 and 9, and 9.0 patch update 1, when LDAP-based authentication is used with certain configurations. When the vulnerability is active, authentication succeeds with any valid username, regardless of whether the password is correct; it may also succeed with an invalid username (and any password). This allows an attacker with access to the product to impersonate any user.\n\nMitigations: The issue is corrected in the upcoming patch update for each affected product. Product overlays and workaround instructions are available through OpenText Support. The vulnerable configurations are believed to be uncommon.\n\nAdministrators can test for the vulnerability in their installations by attempting to sign on to a Visual COBOL or Enterprise Server component such as ESCWA using a valid username and incorrect password.\n",0.00758,{"cveId":103,"description":104,"publishedDate":58,"cvssScore":90,"cvssVersion":60,"severity":79,"isKev":16,"epssScore":105},"CVE-2017-7423","A Cross-Site Request Forgery (CWE-352) vulnerability in esfadmingui in Micro Focus Enterprise Developer and Enterprise Server 2.3, 2.3 Update 1 before Hotfix 8, and 2.3 Update 2 before Hotfix 9 allows remote unauthenticated attackers to forge requests, if this component is configured. This includes creating new privileged credentials, resulting in privilege elevation (CWE-275). Note esfadmingui is not enabled by default.",0.00751,{"cveId":107,"description":108,"publishedDate":58,"cvssScore":90,"cvssVersion":60,"severity":79,"isKev":16,"epssScore":105},"CVE-2017-5187","A Cross-Site Request Forgery (CWE-352) vulnerability in Directory Server (aka Enterprise Server Administration web UI) in Micro Focus Enterprise Developer and Enterprise Server 2.3 and earlier, 2.3 Update 1 before Hotfix 8, and 2.3 Update 2 before Hotfix 9 allows remote unauthenticated attackers to view and alter (CWE-275) configuration information and inject OS commands (CWE-78) via forged requests.",[],{"title":111,"metaDescription":112,"keywords":113,"structuredData":114},"Enterprise Developer by Microfocus - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Enterprise Developer by Microfocus covering 11 versions with 12 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Enterprise Developer vulnerabilities, Enterprise Developer security, Enterprise Developer CVE, Microfocus Enterprise Developer, Enterprise Developer threat intelligence, Microfocus security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":115,"@type":116,"name":117,"description":112,"url":118,"manufacturer":119,"applicationCategory":123,"softwareVersion":124,"mainEntity":125},"https:\u002F\u002Fschema.org","SoftwareApplication","Enterprise Developer","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fmicrofocus\u002Fenterprise_developer",{"@type":120,"name":121,"url":122},"Organization","Microfocus","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fmicrofocus","Security Software","11 versions tracked",{"@type":126,"name":127,"description":128,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Enterprise Developer Security Vulnerabilities","Security vulnerabilities affecting Enterprise Developer by Microfocus",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":130,"apiVersion":25},"2026-10-17T00:37:45.676Z",{"rows":132,"total":11,"capped":16,"failed":11},[],[]]