Skip to content

CVE-2018-6495 MFSBGN03808 rev.1 - Micro Focus UCMDB, Cross-Site Scripting

MediumCVSS 5.4 EPSS 0.65%
Published
Updated
Exploit status
No public exploit known

Description

Cross-Site Scripting (XSS) in Micro Focus Universal CMDB, version 10.20, 10.21, 10.22, 10.30, 10.31, 10.32, 10.33, 11.0, CMS, version 4.10, 4.11, 4.12, 4.13, 4.14, 4.15.1 and Micro Focus UCMDB Browser, version 4.10, 4.11, 4.12, 4.13, 4.14, 4.15.1. This vulnerability could be remotely exploited to allow Cross-Site Scripting (XSS).

Affected products

ProductAffected versionsFixed in
microfocus universal cmdb = 0.20 No fix listed
microfocus universal cmdb = 10.21 No fix listed
microfocus universal cmdb = 10.22 No fix listed
microfocus universal cmdb = 10.30 No fix listed
microfocus universal cmdb = 10.31 No fix listed
microfocus universal cmdb = 10.32 No fix listed
microfocus universal cmdb = 10.33 No fix listed
microfocus universal cmdb = 11.0 No fix listed
microfocus universal cmdb browser = 4.10 No fix listed
microfocus universal cmdb browser = 4.11 No fix listed
microfocus universal cmdb browser = 4.12 No fix listed
microfocus universal cmdb browser = 4.13 No fix listed
microfocus universal cmdb browser = 4.14 No fix listed
microfocus universal cmdb browser = 4.15.1 No fix listed
microfocus cms server = 4.10 No fix listed
microfocus cms server = 4.11 No fix listed
microfocus cms server = 4.12 No fix listed
microfocus cms server = 4.13 No fix listed
microfocus cms server = 4.14 No fix listed
microfocus cms server = 4.15.1 No fix listed
micro focus UCMDB = 10.20, 10.21, 10.22, 10.30, 10.31, 10.32, 10.33, 11.0 No fix listed
micro focus CMS Server 2018.05 = 4.10, 4.11, 4.12, 4.13, 4.14, 4.15.1 No fix listed
micro focus UCMDB Browser = 4.10, 4.11, 4.12, 4.13, 4.14, 4.15.1 No fix listed

References