CVE-2017-14362: MFSBGN03793 rev.1 - Project and Portfolio Management Center, Multiple vulnerabilities

Security readout for executives and security teams

Micro Focus Project and Portfolio Management Center 9.32 has a cross-site request forgery issue. In business terms, an attacker may be able to cause unintended actions through the application if vulnerable conditions exist. The provided sources do not name a public exploit or confirm active abuse. Exposure is limited by the bundle to organizations still running Micro Focus Project and Portfolio Management Center 9.32. Risk is higher for browser-accessible instances supporting sensitive project, portfolio, or operational workflows. The sources do not identify other affected versions or configurations. Treat this as a high-priority legacy application risk if PPM Center 9.32 is still in use. Immediate urgency depends on whether the system is exposed, business-critical, and still supported. No active exploitation is confirmed in the provided evidence. Mitigation focus: Inventory Micro Focus Project and Portfolio Management Center deployments and confirm whether version 9.32 is present.; Review Micro Focus advisory KM03014426 for vendor-supported fixes, upgrades, or configuration guidance.; Prioritize remediation for internet-accessible or business-critical PPM Center instances..

Prepared

May 24, 2026, 09:54 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.