CVE-2019-11654

7.5 highEPSS 2.6%

High (7.5) in microfocus verastream host integrator. EPSS 2.6% chance of exploitation in the next 30 days.

Path traversal vulnerability in Micro Focus Verastream Host Integrator (VHI), versions 7.7 SP2 and earlier, The vulnerability allows remote unauthenticated attackers to read arbitrary files.

Severity

CVSS 3.1

7.5 high

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS: 2.6% chance of exploitation in the next 30 days; higher than 85% of CVEs (scores of 2026-10-31)
CWE: CWE-22
Published: 2019-08-23
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

microfocus:verastream_host_integrator

References

https://support.microfocus.com/kb/doc.php?id=7024061
https://support.microfocus.com/kb/doc.php?id=7024061

Check your stack JSON