VulnerabilityModified

CVE-2020-9517

There is an improper restriction of rendered UI layers or frames vulnerability in Micro Focus Service Manager Release Control versions 9.50 and 9.60.

MEDIUM 5.4EPSS 0.48%

Does this matter?

Lower severity and a low EPSS score (0.48%). Track it; it rarely justifies an emergency change on its own.

Description

There is an improper restriction of rendered UI layers or frames vulnerability in Micro Focus Service Manager Release Control versions 9.50 and 9.60. The vulnerability may result in the ability of malicious users to perform UI redress attacks.

CVSS 3.1: 5.4 MEDIUMCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
EPSS: 0.48% probability · 40th percentile
CISA KEV: Not listed
Weakness: CWE-1021
Affected: microfocus/service manager
Source: security@opentext.com

References

https://softwaresupport.softwaregrp.com/doc/KM03604692
https://softwaresupport.softwaregrp.com/doc/KM03604692

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.