PatchTheCVECVE-2020-11842: Information disclosure vulnerability in Micro Focus Verastream Host Integrator (VHI) product, affecting versio
CVE-2020-11842 is a high-severity flaw (CVSS 7.5) affecting verastream host integrator. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.
Information disclosure vulnerability in Micro Focus Verastream Host Integrator (VHI) product, affecting versions earlier than 7.8 Update 1 (7.8.49 or 7.8.0.49). The vulnerability allows an unauthenticated attackers to view information they may not have been authorized to view.
Why this priority
- High severity
- Remotely exploitable, no login, no user action
A fixed release or distro patch exists.
Risk facts
| CVSS score | 7.5 (High) |
| Attack vector | Network (remote) |
| Attack complexity | Low |
| Privileges needed | None |
| User interaction | None |
| EPSS exploit chance | 1.1% (top 33%) |
| CISA exploited list | No |
| Published | 2020-05-04 |
| Last modified | 2026-06-17 |
Last updated 2026-06-17 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score
Am I affected?
Timeline
- Published CVE record published
- Updated Record last modified
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.
Quick answers
How do I fix CVE-2020-11842?
verastream host integrator: upgrade to newer than 7.7. Exact commands for each OS are on this page.
Is CVE-2020-11842 being exploited?
CVE-2020-11842 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.
What does CVE-2020-11842 affect?
CVE-2020-11842 affects verastream host integrator. Severity is high (CVSS 7.5). Information disclosure vulnerability in Micro Focus Verastream Host Integrator (VHI) product, affecting versions earlier than 7.8 Update 1 (7.8.49 or 7.8.0.49). The vulnerability allows an unauthenticated attackers to view information they
How urgent is CVE-2020-11842?
Priority 48/100. High severity; Remotely exploitable, no login, no user action
Related CVEs
- CVE-2021-22523 HIGH 7.6 UPGRADE XML External Entity vulnerability in Micro Focus Verastream Host Integrator, affecting version 7.8 Update 1 an
- CVE-2021-22522 HIGH 7.1 UPGRADE Reflected Cross-Site Scripting vulnerability in Micro Focus Verastream Host Integrator, affecting version vers
- CVE-2019-11654 HIGH 7.5 DOWNGRADE Path traversal vulnerability in Micro Focus Verastream Host Integrator (VHI), versions 7.7 SP2 and earlier, Th
- CVE-2013-3626 HIGH 9.3 DOWNGRADE Directory traversal vulnerability in the Session Server in Attachmate Verastream Host Integrator (VHI) 6.0 thr