CVE-2018-6495 MFSBGN03808 rev.1 - Micro Focus UCMDB, Cross-Site Scripting
MediumCVSS 5.4
EPSS 0.65%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross-Site Scripting (XSS) in Micro Focus Universal CMDB, version 10.20, 10.21, 10.22, 10.30, 10.31, 10.32, 10.33, 11.0, CMS, version 4.10, 4.11, 4.12, 4.13, 4.14, 4.15.1 and Micro Focus UCMDB Browser, version 4.10, 4.11, 4.12, 4.13, 4.14, 4.15.1. This vulnerability could be remotely exploited to allow Cross-Site Scripting (XSS).
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| microfocus universal cmdb | = 0.20 | No fix listed |
| microfocus universal cmdb | = 10.21 | No fix listed |
| microfocus universal cmdb | = 10.22 | No fix listed |
| microfocus universal cmdb | = 10.30 | No fix listed |
| microfocus universal cmdb | = 10.31 | No fix listed |
| microfocus universal cmdb | = 10.32 | No fix listed |
| microfocus universal cmdb | = 10.33 | No fix listed |
| microfocus universal cmdb | = 11.0 | No fix listed |
| microfocus universal cmdb browser | = 4.10 | No fix listed |
| microfocus universal cmdb browser | = 4.11 | No fix listed |
| microfocus universal cmdb browser | = 4.12 | No fix listed |
| microfocus universal cmdb browser | = 4.13 | No fix listed |
| microfocus universal cmdb browser | = 4.14 | No fix listed |
| microfocus universal cmdb browser | = 4.15.1 | No fix listed |
| microfocus cms server | = 4.10 | No fix listed |
| microfocus cms server | = 4.11 | No fix listed |
| microfocus cms server | = 4.12 | No fix listed |
| microfocus cms server | = 4.13 | No fix listed |
| microfocus cms server | = 4.14 | No fix listed |
| microfocus cms server | = 4.15.1 | No fix listed |
| micro focus UCMDB | = 10.20, 10.21, 10.22, 10.30, 10.31, 10.32, 10.33, 11.0 | No fix listed |
| micro focus CMS Server 2018.05 | = 4.10, 4.11, 4.12, 4.13, 4.14, 4.15.1 | No fix listed |
| micro focus UCMDB Browser | = 4.10, 4.11, 4.12, 4.13, 4.14, 4.15.1 | No fix listed |
References
- 1040970 vdb-entry
- softwaresupport.softwaregrp.com