← Back to CVEs

CVE-2018-6495

MEDIUM

5.4

Description

Cross-Site Scripting (XSS) in Micro Focus Universal CMDB, version 10.20, 10.21, 10.22, 10.30, 10.31, 10.32, 10.33, 11.0, CMS, version 4.10, 4.11, 4.12, 4.13, 4.14, 4.15.1 and Micro Focus UCMDB Browser, version 4.10, 4.11, 4.12, 4.13, 4.14, 4.15.1. This vulnerability could be remotely exploited to allow Cross-Site Scripting (XSS).

CVE Details

CVSS v3.1 Score5.4

SeverityMEDIUM

CVSS VectorCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Attack VectorNETWORK

ComplexityLOW

Privileges RequiredLOW

User InteractionREQUIRED

Published5/23/2018

Last Modified11/21/2024

Sourcenvd

Honeypot Sightings0

Affected Products

microfocus:cms_servermicrofocus:universal_cmdbmicrofocus:universal_cmdb_browser

Weaknesses (CWE)

CWE-79

References

http://www.securitytracker.com/id/1040970(security@opentext.com)

https://softwaresupport.softwaregrp.com/document/-/facetsearch/document/KM03164778(security@opentext.com)

http://www.securitytracker.com/id/1040970(af854a3a-2127-422b-91ae-364da2661108)

https://softwaresupport.softwaregrp.com/document/-/facetsearch/document/KM03164778(af854a3a-2127-422b-91ae-364da2661108)

IOC Correlations

No correlations recorded

This product uses data from the NVD API but is not endorsed or certified by the NVD.