CVE-2017-14362

High

Published: 13/12/2017(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

Version 9.32 of Micro Focus Project and Portfolio Management Center contains a Cross-Site Request Forgery (CSRF) vulnerability. An attacker could exploit this flaw to carry out a CSRF attack.

Risk Assessment

The organization may be exposed to unauthorized actions by users, potentially leading to data loss or system integrity breaches.

Recommendation

It is recommended to upgrade to the latest version of the software to eliminate this vulnerability and implement additional security mechanisms against CSRF attacks.

Other vulnerabilities in Micro Focus Project and Portfolio Management Center, version 9.32

CVE-2017-14361High
Man-In-The-Middle vulnerability in Micro Focus Project and Portfolio Management Center, version 9.32, allows for a Man-in-the-middle attack.

Original NVD description (English source)

Cross-Site Request Forgery vulnerability in Micro Focus Project and Portfolio Management Center, version 9.32. This vulnerability could be exploited to allow a Cross-Site Forgery attack.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS