VulnerabilityModified

CVE-2019-18942

Micro Focus Solutions Business Manager versions prior to 11.7.1 are vulnerable to stored XSS.

MEDIUM 4.8EPSS 0.30%

Does this matter?

Lower severity and a low EPSS score (0.30%). Track it; it rarely justifies an emergency change on its own.

Description

Micro Focus Solutions Business Manager versions prior to 11.7.1 are vulnerable to stored XSS. The application reflects previously stored user input without encoding.

CVSS 3.1: 4.8 MEDIUMCVSS:3.1/AV:A/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
EPSS: 0.30% probability · 23th percentile
CISA KEV: Not listed
Weakness: CWE-79
Affected: microfocus/solutions business manager
Source: security@opentext.com

References

http://knowledgebase.serena.com/resources/sites/KNOWLEDGEBASE/content/live/SOLUTIONS/142000/S142001/en_US/sbm_11.7.1_security_bulletin.htm
http://knowledgebase.serena.com/resources/sites/KNOWLEDGEBASE/content/live/SOLUTIONS/142000/S142001/en_US/sbm_11.7.1_security_bulletin.htm

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.