{"id":"CVE-2019-11666","state":"PUBLISHED","title":"Insecure deserialization of untrusted data in Micro Focus Service Manager product versions 9.30, 9.31, 9.32, 9.33, 9.34, 9.35, 9.40, 9.41, 9.50, 9.51, 9.52, 9.60, 9.61, 9.62. The v","description":"Insecure deserialization of untrusted data in Micro Focus Service Manager product versions 9.30, 9.31, 9.32, 9.33, 9.34, 9.35, 9.40, 9.41, 9.50, 9.51, 9.52, 9.60, 9.61, 9.62. The vulnerability could be exploited to allow insecure deserialization of untrusted data.","publishedAt":"2019-09-17T18:52:03.000Z","updatedAt":"2024-08-04T23:03:31.614Z","severity":null,"assigner":"microfocus","products":["Micro Focus Service Manager"],"affected":[{"vendor":"Micro Focus","product":"Service Manager","versions":[{"version":"9.30","status":"affected"},{"version":"9.31","status":"affected"},{"version":"9.32","status":"affected"},{"version":"9.33","status":"affected"},{"version":"9.34","status":"affected"},{"version":"9.35","status":"affected"},{"version":"9.40","status":"affected"},{"version":"9.41","status":"affected"},{"version":"9.50","status":"affected"},{"version":"9.51","status":"affected"},{"version":"9.52","status":"affected"},{"version":"9.60","status":"affected"},{"version":"9.61","status":"affected"},{"version":"9.62","status":"affected"}]}],"references":["https://softwaresupport.softwaregrp.com/doc/KM03518316"],"weaknesses":[],"ingestedAt":"2026-10-29T19:45:22.458Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2019/11xxx/CVE-2019-11666.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2019-11666","state":"PUBLISHED","datePublished":"2019-09-17T18:52:03.000Z","dateUpdated":"2024-08-04T23:03:31.614Z","assignerShortName":"microfocus","assignerOrgId":"f81092c5-7f14-476d-80dc-24857f90be84","dateReserved":"2019-05-01T00:00:00.000Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"Insecure deserialization of untrusted data in Micro Focus Service Manager product versions 9.30, 9.31, 9.32, 9.33, 9.34, 9.35, 9.40, 9.41, 9.50, 9.51, 9.52, 9.60, 9.61, 9.62. The vulnerability could be exploited to allow insecure deserialization of untrusted data."}],"affected":[{"vendor":"Micro Focus","product":"Service Manager","versions":[{"version":"9.30","status":"affected"},{"version":"9.31","status":"affected"},{"version":"9.32","status":"affected"},{"version":"9.33","status":"affected"},{"version":"9.34","status":"affected"},{"version":"9.35","status":"affected"},{"version":"9.40","status":"affected"},{"version":"9.41","status":"affected"},{"version":"9.50","status":"affected"},{"version":"9.51","status":"affected"},{"version":"9.52","status":"affected"},{"version":"9.60","status":"affected"},{"version":"9.61","status":"affected"},{"version":"9.62","status":"affected"}]}],"references":[{"url":"https://softwaresupport.softwaregrp.com/doc/KM03518316","tags":["x_refsource_CONFIRM"]}],"problemTypes":[{"descriptions":[{"description":"Insecure deserialization of untrusted data.","lang":"en","type":"text"}]}],"providerMetadata":{"shortName":"microfocus","dateUpdated":"2021-01-06T16:15:43.000Z","orgId":"f81092c5-7f14-476d-80dc-24857f90be84"},"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"security@microfocus.com","ID":"CVE-2019-11666","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"Service Manager","version":{"version_data":[{"version_value":"9.30"},{"version_value":"9.31"},{"version_value":"9.32"},{"version_value":"9.33"},{"version_value":"9.34"},{"version_value":"9.35"},{"version_value":"9.40"},{"version_value":"9.41"},{"version_value":"9.50"},{"version_value":"9.51"},{"version_value":"9.52"},{"version_value":"9.60"},{"version_value":"9.61"},{"version_value":"9.62"}]}}]},"vendor_name":"Micro Focus"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"Insecure deserialization of untrusted data in Micro Focus Service Manager product versions 9.30, 9.31, 9.32, 9.33, 9.34, 9.35, 9.40, 9.41, 9.50, 9.51, 9.52, 9.60, 9.61, 9.62. The vulnerability could be exploited to allow insecure deserialization of untrusted data."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"Insecure deserialization of untrusted data."}]}]},"references":{"reference_data":[{"name":"https://softwaresupport.softwaregrp.com/doc/KM03518316","refsource":"CONFIRM","url":"https://softwaresupport.softwaregrp.com/doc/KM03518316"}]}}},"adp":[{"title":"CVE Program Container","references":[{"url":"https://softwaresupport.softwaregrp.com/doc/KM03518316","tags":["x_refsource_CONFIRM","x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-04T23:03:31.614Z"}}]}}}