CVE-2017-7422

CVE-2017-7422

Vendor Micro Focus
Product Micro Focus Enterprise Developer, Micro Focus Enterprise Server
Weakness CWE-79 · XSS
Published August 21, 2017
Last update September 17, 2024
View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

Reflected and stored Cross-Site Scripting (XSS, CWE-79) vulnerabilities in esfadmingui in Micro Focus Enterprise Developer and Enterprise Server 2.3, 2.3 Update 1 before Hotfix 8, and 2.3 Update 2 before Hotfix 9 allow remote authenticated attackers to bypass protection mechanisms (CWE-693) and other security features, if this component is configured. Note esfadmingui is not enabled by default.

Key dates

02Disclosure timeline

August 21, 2017 CVE published
September 17, 2024 Record updated

Related vulnerabilities

04Related CVE

CVE-2026-6690 LifePress <= 2.2.2 - Unauthenticated Stored Cross-Site Scripting via 'n' Parameter via lp_update_mds AJAX Action CVE-2024-4379 Premium Addons for Elementor <= 4.10.31 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via Global Tooltip CVE-2024-52824 Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) CVE-2023-44301 CVE-2025-11880 SM CountDown Widget <= 1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting