CVE-2019-3493

HighCVSS 8.8/10Last modified Jun 17, 2026

Description

A potential security vulnerability has been identified in Micro Focus Network Automation Software 9.20, 9.21, 10.00, 10.10, 10.20, 10.30, 10.40, 10.50, 2018.05, 2018.08, 2018.11, and Micro Focus Network Operations Management (NOM) all versions. The vulnerability could be remotely exploited to Remote Code Execution.

Metrics

CVSS 3.0 8.8/10CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected software

Vendor	Product	Versions
Micro Focus	Micro Focus Network Automation and Micro Focus Network Operations Management (NOM)	network operations management all; network automation 9.20 9.21 10.00 10.10 10.20 10.40 10.30 10.50 2018.05 2018.08 2018.11

References

Timeline

Published: Apr 29, 2019
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2019

CVE-2019-34947.5Simply-Blog through 2019-01-01 has SQL Injection via the admin/deleteCategories.php delete parameter.CVE-2019-34958.8An issue was discovered on Wifi-soft UniBox controller 0.x through 2.x devices. network/mesh/edit-nds.php is vulnerable to arbitrary file up CVE-2019-34968.8An issue was discovered on Wifi-soft UniBox controller 3.x devices. The tools/controller/diagnostic_tools_controller Diagnostic Tools Contro CVE-2019-34978.8An issue was discovered on Wifi-soft UniBox controller 0.x through 2.x devices. The tools/ping Ping feature of the Diagnostic Tools componen CVE-2019-34986.5In Django 1.11.x before 1.11.18, 2.0.x before 2.0.10, and 2.1.x before 2.1.5, an Improper Neutralization of Special Elements in Output Used CVE-2019-35007.8aria2c in aria2 1.33.1, when --log is used, can store an HTTP Basic Authentication username and password in a file, which might allow local CVE-2019-35014.8The OUGC Awards plugin before 1.8.19 for MyBB allows XSS via a crafted award reason that is mishandled on the awards page or in a user profi CVE-2019-35527.5C++ Facebook Thrift servers (using cpp2) would not error upon receiving messages with containers of fields of unknown type. As a result, mal CVE-2019-35537.5C++ Facebook Thrift servers would not error upon receiving messages declaring containers of sizes larger than the payload. As a result, mali CVE-2019-35545.9Wangle's AcceptRoutingHandler incorrectly casts a socket when accepting a TLS 1.3 connection, leading to a potential denial of service attac CVE-2019-35568.1HHVM supports the use of an "admin" server which accepts administrative requests over HTTP. One of those request handlers, dump-pcre-cache, CVE-2019-35579.8The implementations of streams for bz2 and php://output improperly implemented their readImpl functions, returning -1 consistently. This beh