Microfocus

Microfocus maintains a broadly represented portfolio spanning identity and access management, IT service management, and directory infrastructure products that are widely deployed across enterprise environments. Vulnerabilities affecting the vendor skew toward serious outcomes, with an elevated share reaching critical severity and a moderate tendency toward public exploit availability. The exposure concentrates in products such as iManager, Access Manager, eDirectory, and Service Manager and recurs through weakness classes including input-validation and neutralization failures (cross-site scripting, XML external entity injection), cross-site request forgery, and sensitive information exposure that are characteristic of web-facing authentication and administrative interfaces. Defenders should treat Microfocus advisories affecting identity and access control systems as high-priority given their direct bearing on account compromise and lateral movement risk. Current exploitation activity and severity counts are shown alongside this summary.