{"resultsPerPage":1,"startIndex":0,"totalResults":1,"format":"NVD_CVE","version":"2.0","timestamp":"2026-09-24T02:33:09.415","vulnerabilities":[{"cve":{"id":"CVE-2019-3489","sourceIdentifier":"security@opentext.com","published":"2019-04-01T20:29:00.800","lastModified":"2026-06-17T02:35:11.827","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An unauthenticated file upload vulnerability has been identified in the Web Client component of Micro Focus Content Manager 9.1, 9.2, and 9.3 when configured to use the ADFS authentication method. The vulnerability could be exploited by an unauthenticated remote attacker to upload content to arbitrary locations on the Content Manager server."},{"lang":"es","value":"Se ha identificado una vulnerabilidad de subida de archivos no autenticados en el componente del cliente web de Micro Focus Content Manager, en sus versiones 9.1, 9.2 y 9.3, cuando se configuran para utilizar el método de autenticación ADFS. Esta vulnerabilidad podría ser explotada por un atacante remoto no autenticado para subir contenido a ubicaciones arbitrarias en el servidor Content Manager."}],"affected":[{"source":"security@opentext.com","affectedData":[{"vendor":"Micro Focus","product":"Micro Focus Content Manager","versions":[{"version":"9.1","status":"affected"},{"version":"9.2","status":"affected"},{"version":"9.3","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-434"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microfocus:content_manager:*:*:*:*:*:*:*:*","versionStartIncluding":"9.1","versionEndIncluding":"9.3","matchCriteriaId":"B4FAFEE1-93A0-4977-82DA-7A0B92DAB473"}]}]}],"references":[{"url":"https://softwaresupport.softwaregrp.com/doc/KM03359911","source":"security@opentext.com"},{"url":"https://softwaresupport.softwaregrp.com/doc/KM03359911","source":"af854a3a-2127-422b-91ae-364da2661108"}]}}]}