{"id":"CVE-2018-7681","url":"https://www.cyber-defence.io/tools/cve/CVE-2018-7681","generatedAt":"2026-10-29T01:43:26.306Z","title":"Micro Focus Solutions Business Manager versions prior to 11.4 allows JavaScript to be embedded in URLs placed in \"Favorites\" folder.","description":"Micro Focus Solutions Business Manager versions prior to 11.4 allows JavaScript to be embedded in URLs placed in \"Favorites\" folder. If the user has certain administrative privileges then this vulnerability can impact other users in the system.","published":"2018-06-21T19:29:00.000Z","lastModified":"2026-06-17T02:03:32.000Z","status":"Modified","sourceIdentifier":"security@opentext.com","cvss":{"version":"3.0","score":4.8,"severity":"MEDIUM","vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N"},"cwe":["CWE-79"],"affected":["microfocus/solutions business manager"],"epss":{"score":0.00512,"percentile":0.43482,"date":"2026-10-27","history":[]},"kev":{"listed":false},"exploits":{"count":0,"verified":false,"firstPublished":null,"source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[]},"verdict":{"level":"low","text":"Lower severity and a low EPSS score (0.51%). Track it; it rarely justifies an emergency change on its own."},"changes":[],"references":[{"url":"http://help.serena.com/doc_center/sbm/ver11_4/sbm_release_notes.htm","source":"security@opentext.com"},{"url":"http://help.serena.com/doc_center/sbm/ver11_4/sbm_release_notes.htm","source":"af854a3a-2127-422b-91ae-364da2661108"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2018-7681","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}