CVE-2019-11651

Severity: medium (CVSS 6.1 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.8% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2019-10-02 · updated 2026-06-17
Weakness: CWE-79

Description

Reflected XSS on Micro Focus Enterprise Developer and Enterprise Server, all versions prior to version 3.0 Patch Update 20, version 4.0 Patch Update 12, and version 5.0 Patch Update 2. The vulnerability could be exploited to redirect a user to a malicious page or forge certain types of web requests.

Affected products

Micro Focus Enterprise Developer: 3.0, 3.0-patch_1, 3.0-patch_10, 3.0-patch_11, 3.0-patch_12, 3.0-patch_13 (+28)
Micro Focus Enterprise Server: 3.0, 3.0-patch_1, 3.0-patch_10, 3.0-patch_11, 3.0-patch_12, 3.0-patch_13 (+28)

References

https://softwaresupport.softwaregrp.com/doc/KM03532232
https://softwaresupport.softwaregrp.com/doc/KM03532232

Get alerted when CVE-2019-11651 or the next vulnerability affects your stack