Skip to content

Product

microfocus groupwise vulnerabilities

2 published CVES affecting microfocus groupwise, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
2
Critical
0
High
1
Medium
1
Low
0
Unscored
0
CISA KEV
0

Latest microfocus groupwise CVEs

Newest publication first

  1. CVE-2022-38756 CVE-2022-38756 vulnerability in GW Web prior to 18.4.2

    Published
    MediumCVSS 4.3 EPSS 0.89%

    A vulnerability has been identified in Micro Focus GroupWise Web in versions prior to 18.4.2. The GW Web component makes a request to the Post Office Agent that contains sensitive information in the query parameters that could be logged by any intervening HTTP proxies.

  2. CVE-2018-12468 Arbitrary File Upload in GroupWise Administration Console

    Published
    HighCVSS 7.2 EPSS 2.2%

    A vulnerability in the administration console of Micro Focus GroupWise prior to version 18.0.2 may allow a remote attacker authenticated as an administrator to upload files to an arbitrary path on the server. In certain circumstances this could result in remote code execution.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.