{"containers": {"cna": {"affected": [{"product": "Service Manager", "vendor": "Micro Focus", "versions": [{"status": "affected", "version": "9.30"}, {"status": "affected", "version": "9.31"}, {"status": "affected", "version": "9.32"}, {"status": "affected", "version": "9.33"}, {"status": "affected", "version": "9.34"}, {"status": "affected", "version": "9.35"}, {"status": "affected", "version": "9.40"}, {"status": "affected", "version": "9.41"}, {"status": "affected", "version": "9.50"}, {"status": "affected", "version": "9.51"}, {"status": "affected", "version": "9.52"}, {"status": "affected", "version": "9.60"}, {"status": "affected", "version": "9.61"}, {"status": "affected", "version": "9.62"}]}], "descriptions": [{"lang": "en", "value": "Insecure deserialization of untrusted data in Micro Focus Service Manager product versions 9.30, 9.31, 9.32, 9.33, 9.34, 9.35, 9.40, 9.41, 9.50, 9.51, 9.52, 9.60, 9.61, 9.62. The vulnerability could be exploited to allow insecure deserialization of untrusted data."}], "problemTypes": [{"descriptions": [{"description": "Insecure deserialization of untrusted data.", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2021-01-06T16:15:43.000Z", "orgId": "f81092c5-7f14-476d-80dc-24857f90be84", "shortName": "microfocus"}, "references": [{"tags": ["x_refsource_CONFIRM"], "url": "https://softwaresupport.softwaregrp.com/doc/KM03518316"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "security@microfocus.com", "ID": "CVE-2019-11666", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "Service Manager", "version": {"version_data": [{"version_value": "9.30"}, {"version_value": "9.31"}, {"version_value": "9.32"}, {"version_value": "9.33"}, {"version_value": "9.34"}, {"version_value": "9.35"}, {"version_value": "9.40"}, {"version_value": "9.41"}, {"version_value": "9.50"}, {"version_value": "9.51"}, {"version_value": "9.52"}, {"version_value": "9.60"}, {"version_value": "9.61"}, {"version_value": "9.62"}]}}]}, "vendor_name": "Micro Focus"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "Insecure deserialization of untrusted data in Micro Focus Service Manager product versions 9.30, 9.31, 9.32, 9.33, 9.34, 9.35, 9.40, 9.41, 9.50, 9.51, 9.52, 9.60, 9.61, 9.62. The vulnerability could be exploited to allow insecure deserialization of untrusted data."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "Insecure deserialization of untrusted data."}]}]}, "references": {"reference_data": [{"name": "https://softwaresupport.softwaregrp.com/doc/KM03518316", "refsource": "CONFIRM", "url": "https://softwaresupport.softwaregrp.com/doc/KM03518316"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-04T23:03:31.614Z"}, "title": "CVE Program Container", "references": [{"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "https://softwaresupport.softwaregrp.com/doc/KM03518316"}]}]}, "cveMetadata": {"assignerOrgId": "f81092c5-7f14-476d-80dc-24857f90be84", "assignerShortName": "microfocus", "cveId": "CVE-2019-11666", "datePublished": "2019-09-17T18:52:03.000Z", "dateReserved": "2019-05-01T00:00:00.000Z", "dateUpdated": "2024-08-04T23:03:31.614Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:microfocus:service_manager:*:*:*:*:*:*:*:*", "matchCriteriaId": "2ADB19C2-B503-4BC5-A54D-D3F7E7B1E975", "versionEndIncluding": "9.62", "versionStartIncluding": "9.30", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "Insecure deserialization of untrusted data in Micro Focus Service Manager product versions 9.30, 9.31, 9.32, 9.33, 9.34, 9.35, 9.40, 9.41, 9.50, 9.51, 9.52, 9.60, 9.61, 9.62. The vulnerability could be exploited to allow insecure deserialization of untrusted data."}, {"lang": "es", "value": "Deserializaci\u00f3n no segura de datos no confiables en el producto Micro Focus Service Manager en las versiones 9.30, 9.31, 9.32, 9.33, 9.34, 9.35, 9.40, 9.41, 9.50, 9.51, 9.52, 9.60, 9.61, 9.62. La vulnerabilidad podr\u00eda ser explotada para permitir la deserializaci\u00f3n no segura de datos no confiables."}], "id": "CVE-2019-11666", "lastModified": "2024-11-21T04:21:33.603", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 6.8, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "version": "2.0"}, "exploitabilityScore": 8.6, "impactScore": 6.4, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": true}], "cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 8.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 2.8, "impactScore": 5.9, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2019-09-17T19:15:10.697", "references": [{"source": "security@opentext.com", "url": "https://softwaresupport.softwaregrp.com/doc/KM03518316"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://softwaresupport.softwaregrp.com/doc/KM03518316"}], "sourceIdentifier": "security@opentext.com", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-502"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{}