CVE-2018-12464

CRITICAL

Micro Focus Secure Messaging Gateway <471 - SQL Injection

Title source: llm

Description

A SQL injection vulnerability in the web administration and quarantine components of Micro Focus Secure Messaging Gateway allows an unauthenticated remote attacker to execute arbitrary SQL statements against the database. This can be exploited to create an administrative account and used in conjunction with CVE-2018-12465 to achieve unauthenticated remote code execution. Affects Micro Focus Secure Messaging Gateway versions prior to 471. It does not affect previous versions of the product that use the GWAVA product name (i.e. GWAVA 6.5).

Exploits (2)

exploitdb WORKING POC

by Mehmet Ince · rubywebappsphp

https://www.exploit-db.com/exploits/45083

View Code ZIP pw:eip

metasploit WORKING POC EXCELLENT

by Mehmet Ince <[email protected]> · rubypoc

https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/microfocus_secure_messaging_gateway.rb

View Code ZIP pw:eip

References (3)

[Various Sources] https://pentest.blog/unexpected-journey-6-all-ways-lead-to-rome-remote-code-execution-on-microfocus-secure-messaging-gateway/

[Various Sources] https://support.microfocus.com/kb/doc.php?id=7023132

[Exploit, Third Party Advisory] https://www.exploit-db.com/exploits/45083/

Scores

CVSS v3 10.0

EPSS 0.7644

EPSS Percentile 98.9%

Attack Vector NETWORK

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Classification

CWE

CWE-89

Status published

Affected Products (1)

microfocus/secure_messaging_gateway < 471

Timeline

Published Jun 29, 2018

Tracked Since Feb 18, 2026