PT-2019-12454 · Micro Focus · Enterprise Developer+1

Publicado 2019-10-02 · Atualizado 2019-10-10 · CVE-2019-11651

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Média

Vetor base

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Micro Focus Enterprise Developer and Enterprise Server versions prior to 3.0 Patch Update 20 Micro Focus Enterprise Developer and Enterprise Server versions prior to 4.0 Patch Update 12 Micro Focus Enterprise Developer and Enterprise Server versions prior to 5.0 Patch Update 2

Description The issue is related to Reflected XSS, which could be exploited to redirect a user to a malicious page or forge certain types of web requests.

Recommendations For versions prior to 3.0 Patch Update 20, update to version 3.0 Patch Update 20 or later. For versions prior to 4.0 Patch Update 12, update to version 4.0 Patch Update 12 or later. For versions prior to 5.0 Patch Update 2, update to version 5.0 Patch Update 2 or later.

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2019-11651

Produtos afetados

Enterprise Developer

Enterprise Server

Referências · 3

• https://softwaresupport.softwaregrp.com/doc/KM03532232 · Nota
• https://osv.dev/vulnerability/CVE-2019-11651 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2019-11651 · Nota de Segurança