CVE-2019-11654: A path traversal vulnerability has been identified in Verastream Host Integrator

Severity: high (CVSS 7.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.6% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2019-08-23 · updated 2026-06-17
Weakness: CWE-22

Description

Path traversal vulnerability in Micro Focus Verastream Host Integrator (VHI), versions 7.7 SP2 and earlier, The vulnerability allows remote unauthenticated attackers to read arbitrary files.

Affected products

Verastream Host Integrator.: 7.5, 7.5-sp1, 7.6, 7.6-sp1, 7.7, 7.7-sp1 (+3)

References

https://support.microfocus.com/kb/doc.php?id=7024061
https://support.microfocus.com/kb/doc.php?id=7024061

Get alerted when CVE-2019-11654 or the next vulnerability affects your stack