Lucene search

MicrofocusCVE-2018-7681

HistoryJun 21, 2018 - 7:29 p.m.

CVE-2018-7681

2018-06-2119:29:00

CWE-79

microfocus

web.nvd.nist.gov

cve-2018-7681

micro focus

business manager

javascript

url

vulnerability

CVSS2

3.5

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:S/C:N/I:P/A:N

CVSS3

4.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N

AI Score

5.1

Confidence

High

EPSS

0.001

Percentile

21.7%

JSON

Micro Focus Solutions Business Manager versions prior to 11.4 allows JavaScript to be embedded in URLs placed in “Favorites” folder. If the user has certain administrative privileges then this vulnerability can impact other users in the system.

Affected configurations

Nvd

Node

microfocussolutions_business_managerRange<11.4

VendorProductVersionCPE
microfocussolutions_business_manager*cpe:2.3:a:microfocus:solutions_business_manager:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
microfocus	solutions_business_manager	*	cpe:2.3:a:microfocus:solutions_business_manager::::::::

CNA Affected

[
  {
    "product": "Solutions Business Manager 11.4",
    "vendor": "Micro Focus",
    "versions": [
      {
        "status": "affected",
        "version": "Solutions Business Manager versions prior to 11.4"
      }
    ]
  }
]

References

help.serena.com/doc_center/sbm/ver11_4/sbm_release_notes.htm

Social References

CVSS2

3.5

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:S/C:N/I:P/A:N

CVSS3

4.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N

AI Score

5.1

Confidence

High

EPSS

0.001

Percentile

21.7%

JSON

Related for CVE-2018-7681