CVE-2018-12464 Unauthenticated SQL injection in Micro Focus Secure Messaging Gateway

CriticalCVSS 9.8 EPSS 80.7% Framework module Public exploit

Published: 2018-06-29 19:00
Updated: 2026-06-17 04:37
Exploit status: Public exploit available

Description

A SQL injection vulnerability in the web administration and quarantine components of Micro Focus Secure Messaging Gateway allows an unauthenticated remote attacker to execute arbitrary SQL statements against the database. This can be exploited to create an administrative account and used in conjunction with CVE-2018-12465 to achieve unauthenticated remote code execution. Affects Micro Focus Secure Messaging Gateway versions prior to 471. It does not affect previous versions of the product that use the GWAVA product name (i.e. GWAVA 6.5).

Affected products

Product	Affected versions	Fixed in
microfocus secure messaging gateway	< 471	471
micro focus Secure Messaging Gateway	< 471	471

References

CVSS v3.0

9.8 Critical

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack Vector: Network
Attack Complexity: Low
Privileges Required: None
User Interaction: None
Scope: Unchanged
Confidentiality: High
Integrity: High
Availability: High

All scores (4)

v3.0 10.0 · microfocus
v3.0 9.8 · nvd@nist.gov
v3.0 10.0 · security@opentext.com
v2.0 7.5 · nvd@nist.gov

Weakness & likelihood

EPSS (exploitation probability, 30 days): 80.67% (percentile 99.6)
CWE: CWE-89 Unauthenticated SQL injection (CWE-89)

Public exploit references

Metadata only. CVERadar never hosts or runs exploit code.

MicroFocus Secure Messaging Gateway Remote Code Execution Framework module · Metasploit Framework (Rapid7) · 2018-06-19
Micro Focus Secure Messaging Gateway (SMG) < 471 - Remote Code Execution (Metasploit) Exploit · Exploit Database (OffSec) · 2018-07-24