CVE-2018-7679 Micro Focus Solutions Business Manager versions prior to 11.4 when ASP.NET is configured with execute permission on the virtual directories and does not validate the contents of user avatar images, co...
CriticalCVSS 9.8
EPSS 2.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Micro Focus Solutions Business Manager versions prior to 11.4 when ASP.NET is configured with execute permission on the virtual directories and does not validate the contents of user avatar images, could lead to remote code execution.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| microfocus solutions business manager | < 11.4 | 11.4 |
| micro focus Solutions Business Manager 11.4 | = Solutions Business Manager 11.4 prior to 11.4 | No fix listed |