CVE-2019-3489

HIGH 7.5CVE-2019-3489 · Published 01/04/2019 · updated 17/06/2026

In short

CVE-2019-3489 is a HIGH (CVSS 7.5) vulnerability affecting content manager (microfocus).
Chance of exploitation in the next 30 days (EPSS): 1.7%, higher than 77.1% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
content manager microfocus	`≥ 9.1, ≤ 9.3`	No fix yet

Description

An unauthenticated file upload vulnerability has been identified in the Web Client component of Micro Focus Content Manager 9.1, 9.2, and 9.3 when configured to use the ADFS authentication method. The vulnerability could be exploited by an unauthenticated remote attacker to upload content to arbitrary locations on the Content Manager server.

References

softwaresupport.softwaregrp.com/doc/KM03359911

CVE-2019-3489

In short

Description

References

More vulnerabilities in content manager

CVE-2019-3489

In short

Description

References

More vulnerabilities in content manager