What’s Vulnerable › Vulnerabilities

CVE-2019-11663

• Severity: medium (CVSS 6.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.5% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2019-09-18 · updated 2026-06-17
• Weakness: CWE-311

Description

Clear text credentials are used to access managers app in Tomcat in Micro Focus Service Manager product versions 9.30, 9.31, 9.32, 9.33, 9.34, 9.35, 9.40, 9.41, 9.50, 9.51, 9.52, 9.60, 9.61, 9.62. The vulnerability could be exploited to allow sensitive data exposure.

Affected products

• Micro Focus Service Manager: from 9.30 through 9.62

References

• https://softwaresupport.softwaregrp.com/doc/KM03518316
• https://softwaresupport.softwaregrp.com/doc/KM03518316

Get alerted when CVE-2019-11663 or the next vulnerability affects your stack