VulnerabilityModified

CVE-2018-7681

Micro Focus Solutions Business Manager versions prior to 11.4 allows JavaScript to be embedded in URLs placed in "Favorites" folder.

MEDIUM 4.8EPSS 0.51%

Does this matter?

Lower severity and a low EPSS score (0.51%). Track it; it rarely justifies an emergency change on its own.

Description

Micro Focus Solutions Business Manager versions prior to 11.4 allows JavaScript to be embedded in URLs placed in "Favorites" folder. If the user has certain administrative privileges then this vulnerability can impact other users in the system.

CVSS 3.0: 4.8 MEDIUMCVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
EPSS: 0.51% probability · 42th percentile
CISA KEV: Not listed
Weakness: CWE-79
Affected: microfocus/solutions business manager
Source: security@opentext.com

References

http://help.serena.com/doc_center/sbm/ver11_4/sbm_release_notes.htm
http://help.serena.com/doc_center/sbm/ver11_4/sbm_release_notes.htm

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.