PT-2018-17586 · Micro Focus · Ucmbd Browser+2

Published 2018-05-23 · Updated 2023-03-03 · CVE-2018-6495

Positive Technologies (AI Summary)

CVSS v3.1

6.3

Medium

Base vector

AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:H/A:N

Name of the Vulnerable Software and Affected Versions Micro Focus Universal CMDB versions 10.20 through 10.33, 11.0 Micro Focus CMS versions 4.10 through 4.15.1 Micro Focus UCMDB Browser versions 4.10 through 4.15.1

Description The issue is related to Cross-Site Scripting (XSS), which could be remotely exploited. This allows for XSS attacks.

Recommendations For Micro Focus Universal CMDB versions 10.20 through 10.33, 11.0, update to a version that includes the fix for this issue. For Micro Focus CMS versions 4.10 through 4.15.1, update to a version that includes the fix for this issue. For Micro Focus UCMDB Browser versions 4.10 through 4.15.1, update to a version that includes the fix for this issue.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2018-6495

Affected Products

Cms

Ucmbd Browser

Hp Universal Cmdb

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2018-6495 · Security Note
• https://osv.dev/vulnerability/CVE-2018-6495 · Vendor Advisory
• https://softwaresupport.softwaregrp.com/document/-/facetsearch/document/KM03164778 · Note
• http://securitytracker.com/id/1040970 · Note