Search

Find a vulnerability

Search criteria

    2 vulnerabilities found for Micro Focus - Service Manager Automation (SMA) by Micro Focus International

    CVE-2020-9521 (GCVE-0-2020-9521)

    Vulnerability from nvd – Published: 2020-03-26 14:21 – Updated: 2024-08-04 10:34
    VLAI
    Summary
    An SQL injection vulnerability was discovered in Micro Focus Service Manager Automation (SMA), affecting versions 2019.08, 2019.05, 2019.02, 2018.08, 2018.05, 2018.02. The vulnerability could allow for the improper neutralization of special elements in SQL commands and may lead to the product being vulnerable to SQL injection.
    Severity
    No CVSS data available.
    CWE
    • SQL injection
    Assigner
    References
    Impacted products
    Vendor Product Version
    Micro Focus International Micro Focus - Service Manager Automation (SMA) Affected: 2019.08, 2019.05, 2019.02, 2018.08, 2018.05, 2018.02
    Create a notification for this product.
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "providerMetadata": {
              "dateUpdated": "2024-08-04T10:34:38.230Z",
              "orgId": "af854a3a-2127-422b-91ae-364da2661108",
              "shortName": "CVE"
            },
            "references": [
              {
                "tags": [
                  "x_refsource_MISC",
                  "x_transferred"
                ],
                "url": "https://softwaresupport.softwaregrp.com/doc/KM03630615"
              }
            ],
            "title": "CVE Program Container"
          }
        ],
        "cna": {
          "affected": [
            {
              "product": "Micro Focus - Service Manager Automation (SMA)",
              "vendor": "Micro Focus International",
              "versions": [
                {
                  "status": "affected",
                  "version": "2019.08, 2019.05, 2019.02, 2018.08, 2018.05, 2018.02"
                }
              ]
            }
          ],
          "descriptions": [
            {
              "lang": "en",
              "value": "An SQL injection vulnerability was discovered in Micro Focus Service Manager Automation (SMA), affecting versions 2019.08, 2019.05, 2019.02, 2018.08, 2018.05, 2018.02. The vulnerability could allow for the improper neutralization of special elements in SQL commands and may lead to the product being vulnerable to SQL injection."
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "description": "SQL injection",
                  "lang": "en",
                  "type": "text"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2021-01-06T16:15:31.000Z",
            "orgId": "f81092c5-7f14-476d-80dc-24857f90be84",
            "shortName": "microfocus"
          },
          "references": [
            {
              "tags": [
                "x_refsource_MISC"
              ],
              "url": "https://softwaresupport.softwaregrp.com/doc/KM03630615"
            }
          ],
          "x_legacyV4Record": {
            "CVE_data_meta": {
              "ASSIGNER": "security@microfocus.com",
              "ID": "CVE-2020-9521",
              "STATE": "PUBLIC"
            },
            "affects": {
              "vendor": {
                "vendor_data": [
                  {
                    "product": {
                      "product_data": [
                        {
                          "product_name": "Micro Focus - Service Manager Automation (SMA)",
                          "version": {
                            "version_data": [
                              {
                                "version_value": "2019.08, 2019.05, 2019.02, 2018.08, 2018.05, 2018.02"
                              }
                            ]
                          }
                        }
                      ]
                    },
                    "vendor_name": "Micro Focus International"
                  }
                ]
              }
            },
            "data_format": "MITRE",
            "data_type": "CVE",
            "data_version": "4.0",
            "description": {
              "description_data": [
                {
                  "lang": "eng",
                  "value": "An SQL injection vulnerability was discovered in Micro Focus Service Manager Automation (SMA), affecting versions 2019.08, 2019.05, 2019.02, 2018.08, 2018.05, 2018.02. The vulnerability could allow for the improper neutralization of special elements in SQL commands and may lead to the product being vulnerable to SQL injection."
                }
              ]
            },
            "problemtype": {
              "problemtype_data": [
                {
                  "description": [
                    {
                      "lang": "eng",
                      "value": "SQL injection"
                    }
                  ]
                }
              ]
            },
            "references": {
              "reference_data": [
                {
                  "name": "https://softwaresupport.softwaregrp.com/doc/KM03630615",
                  "refsource": "MISC",
                  "url": "https://softwaresupport.softwaregrp.com/doc/KM03630615"
                }
              ]
            }
          }
        }
      },
      "cveMetadata": {
        "assignerOrgId": "f81092c5-7f14-476d-80dc-24857f90be84",
        "assignerShortName": "microfocus",
        "cveId": "CVE-2020-9521",
        "datePublished": "2020-03-26T14:21:41.000Z",
        "dateReserved": "2020-03-01T00:00:00.000Z",
        "dateUpdated": "2024-08-04T10:34:38.230Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.1"
    }

    CVE-2020-9521 (GCVE-0-2020-9521)

    Vulnerability from cvelistv5 – Published: 2020-03-26 14:21 – Updated: 2024-08-04 10:34
    VLAI
    Summary
    An SQL injection vulnerability was discovered in Micro Focus Service Manager Automation (SMA), affecting versions 2019.08, 2019.05, 2019.02, 2018.08, 2018.05, 2018.02. The vulnerability could allow for the improper neutralization of special elements in SQL commands and may lead to the product being vulnerable to SQL injection.
    Severity
    No CVSS data available.
    CWE
    • SQL injection
    Assigner
    References
    Impacted products
    Vendor Product Version
    Micro Focus International Micro Focus - Service Manager Automation (SMA) Affected: 2019.08, 2019.05, 2019.02, 2018.08, 2018.05, 2018.02
    Create a notification for this product.
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "providerMetadata": {
              "dateUpdated": "2024-08-04T10:34:38.230Z",
              "orgId": "af854a3a-2127-422b-91ae-364da2661108",
              "shortName": "CVE"
            },
            "references": [
              {
                "tags": [
                  "x_refsource_MISC",
                  "x_transferred"
                ],
                "url": "https://softwaresupport.softwaregrp.com/doc/KM03630615"
              }
            ],
            "title": "CVE Program Container"
          }
        ],
        "cna": {
          "affected": [
            {
              "product": "Micro Focus - Service Manager Automation (SMA)",
              "vendor": "Micro Focus International",
              "versions": [
                {
                  "status": "affected",
                  "version": "2019.08, 2019.05, 2019.02, 2018.08, 2018.05, 2018.02"
                }
              ]
            }
          ],
          "descriptions": [
            {
              "lang": "en",
              "value": "An SQL injection vulnerability was discovered in Micro Focus Service Manager Automation (SMA), affecting versions 2019.08, 2019.05, 2019.02, 2018.08, 2018.05, 2018.02. The vulnerability could allow for the improper neutralization of special elements in SQL commands and may lead to the product being vulnerable to SQL injection."
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "description": "SQL injection",
                  "lang": "en",
                  "type": "text"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2021-01-06T16:15:31.000Z",
            "orgId": "f81092c5-7f14-476d-80dc-24857f90be84",
            "shortName": "microfocus"
          },
          "references": [
            {
              "tags": [
                "x_refsource_MISC"
              ],
              "url": "https://softwaresupport.softwaregrp.com/doc/KM03630615"
            }
          ],
          "x_legacyV4Record": {
            "CVE_data_meta": {
              "ASSIGNER": "security@microfocus.com",
              "ID": "CVE-2020-9521",
              "STATE": "PUBLIC"
            },
            "affects": {
              "vendor": {
                "vendor_data": [
                  {
                    "product": {
                      "product_data": [
                        {
                          "product_name": "Micro Focus - Service Manager Automation (SMA)",
                          "version": {
                            "version_data": [
                              {
                                "version_value": "2019.08, 2019.05, 2019.02, 2018.08, 2018.05, 2018.02"
                              }
                            ]
                          }
                        }
                      ]
                    },
                    "vendor_name": "Micro Focus International"
                  }
                ]
              }
            },
            "data_format": "MITRE",
            "data_type": "CVE",
            "data_version": "4.0",
            "description": {
              "description_data": [
                {
                  "lang": "eng",
                  "value": "An SQL injection vulnerability was discovered in Micro Focus Service Manager Automation (SMA), affecting versions 2019.08, 2019.05, 2019.02, 2018.08, 2018.05, 2018.02. The vulnerability could allow for the improper neutralization of special elements in SQL commands and may lead to the product being vulnerable to SQL injection."
                }
              ]
            },
            "problemtype": {
              "problemtype_data": [
                {
                  "description": [
                    {
                      "lang": "eng",
                      "value": "SQL injection"
                    }
                  ]
                }
              ]
            },
            "references": {
              "reference_data": [
                {
                  "name": "https://softwaresupport.softwaregrp.com/doc/KM03630615",
                  "refsource": "MISC",
                  "url": "https://softwaresupport.softwaregrp.com/doc/KM03630615"
                }
              ]
            }
          }
        }
      },
      "cveMetadata": {
        "assignerOrgId": "f81092c5-7f14-476d-80dc-24857f90be84",
        "assignerShortName": "microfocus",
        "cveId": "CVE-2020-9521",
        "datePublished": "2020-03-26T14:21:41.000Z",
        "dateReserved": "2020-03-01T00:00:00.000Z",
        "dateUpdated": "2024-08-04T10:34:38.230Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.1"
    }