CVE-2016-5765: Administrative Server in Micro Focus Host Access Management and Security Server (MSS) and Reflection for th...

Security readout for executives and security teams

This flaw lets an unauthenticated remote attacker read arbitrary files from the Administrative Server in affected Micro Focus host access products using limited directory traversal. Business risk depends on whether those administrative services are reachable and what sensitive files are accessible. Exposure is most likely where affected Administrative Server components are reachable over a network, especially internet-facing or broadly accessible management interfaces. Treat as high priority for exposed administrative services because unauthenticated file read can disclose sensitive configuration or credentials. Internal-only, isolated deployments still need planned remediation. Mitigation focus: Upgrade MSS 12.3 to 12.3.326 or later, or MSS 12.2 to 12.2.342 or later.; Upgrade RSG 12.1 to 12.1.362 or later.; Upgrade RWeb 12.3 to 12.3.312 or later, or affected 12.2/12.1 fixed builds..

Prepared

Jun 13, 2026, 13:16 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.