CVE-2018-6495

MEDIUM

Micro Focus Universal CMDB 10.20-11.0 and CMS 4.10-4.15.1 - Cross-Site Scripting

Title source: llm
STIX 2.1

Description

Cross-Site Scripting (XSS) in Micro Focus Universal CMDB, version 10.20, 10.21, 10.22, 10.30, 10.31, 10.32, 10.33, 11.0, CMS, version 4.10, 4.11, 4.12, 4.13, 4.14, 4.15.1 and Micro Focus UCMDB Browser, version 4.10, 4.11, 4.12, 4.13, 4.14, 4.15.1. This vulnerability could be remotely exploited to allow Cross-Site Scripting (XSS).

References (2)

Core 2
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://www.securitytracker.com/id/1040970

Scores

CVSS v3 5.4
EPSS 0.0017
EPSS Percentile 38.0%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Details

CWE
CWE-79
Status published
Products (20)
microfocus/cms_server 4.10
microfocus/cms_server 4.11
microfocus/cms_server 4.12
microfocus/cms_server 4.13
microfocus/cms_server 4.14
microfocus/cms_server 4.15.1
microfocus/universal_cmdb 0.20
microfocus/universal_cmdb 10.21
microfocus/universal_cmdb 10.22
microfocus/universal_cmdb 10.30
... and 10 more
Published May 23, 2018
Tracked Since Feb 18, 2026