CVE-2018-6495: MFSBGN03808 rev.1 - Micro Focus UCMDB, Cross-Site Scripting
First published: Wed May 23 2018(Updated: )
Cross-Site Scripting (XSS) in Micro Focus Universal CMDB, version 10.20, 10.21, 10.22, 10.30, 10.31, 10.32, 10.33, 11.0, CMS, version 4.10, 4.11, 4.12, 4.13, 4.14, 4.15.1 and Micro Focus UCMDB Browser, version 4.10, 4.11, 4.12, 4.13, 4.14, 4.15.1. This vulnerability could be remotely exploited to allow Cross-Site Scripting (XSS).
Credit: meissner@suse.de
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Microfocus Universal Cmdb | =0.20 | |
| Microfocus Universal Cmdb | =10.21 | |
| Microfocus Universal Cmdb | =10.22 | |
| Microfocus Universal Cmdb | =10.30 | |
| Microfocus Universal Cmdb | =10.31 | |
| Microfocus Universal Cmdb | =10.32 | |
| Microfocus Universal Cmdb | =10.33 | |
| Microfocus Universal Cmdb | =11.0 | |
| Microfocus Universal Cmdb Browser | =4.10 | |
| Microfocus Universal Cmdb Browser | =4.11 | |
| Microfocus Universal Cmdb Browser | =4.12 | |
| Microfocus Universal Cmdb Browser | =4.13 | |
| Microfocus Universal Cmdb Browser | =4.14 | |
| Microfocus Universal Cmdb Browser | =4.15.1 | |
| Microfocus Cms Server | =4.10 | |
| Microfocus Cms Server | =4.11 | |
| Microfocus Cms Server | =4.12 | |
| Microfocus Cms Server | =4.13 | |
| Microfocus Cms Server | =4.14 | |
| Microfocus Cms Server | =4.15.1 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is CVE-2018-6495?
CVE-2018-6495 is a vulnerability in Micro Focus Universal CMDB, CMS, and UCMDB Browser that allows for Cross-Site Scripting (XSS) attacks.
What is the severity of CVE-2018-6495?
The severity of CVE-2018-6495 is medium with a severity score of 5.4.
Which versions of Micro Focus Universal CMDB are affected by CVE-2018-6495?
The affected versions of Micro Focus Universal CMDB are 10.20, 10.21, 10.22, 10.30, 10.31, 10.32, 10.33, and 11.0.
Which versions of CMS and UCMDB Browser are affected by CVE-2018-6495?
The affected versions of CMS are 4.10, 4.11, 4.12, 4.13, 4.14, and 4.15.1. The affected versions of UCMDB Browser are 4.10, 4.11, 4.12, 4.13, 4.14, and 4.15.1.
How can I fix CVE-2018-6495?
To fix CVE-2018-6495, it is recommended to update to a version of Micro Focus Universal CMDB, CMS, or UCMDB Browser that is not affected by the vulnerability.
- agent/references
- agent/type
- collector/nvd-index
- agent/software-canonical-lookup-request
- agent/weakness
- agent/author
- agent/softwarecombine
- agent/description
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/severity
- agent/title
- agent/first-publish-date
- agent/tags
- agent/event
- vendor/microfocus
- canonical/microfocus universal cmdb
- version/microfocus universal cmdb/0.20
- version/microfocus universal cmdb/10.21
- version/microfocus universal cmdb/10.22
- version/microfocus universal cmdb/10.30
- version/microfocus universal cmdb/10.31
- version/microfocus universal cmdb/10.32
- version/microfocus universal cmdb/10.33
- version/microfocus universal cmdb/11.0
- canonical/microfocus universal cmdb browser
- version/microfocus universal cmdb browser/4.10
- version/microfocus universal cmdb browser/4.11
- version/microfocus universal cmdb browser/4.12
- version/microfocus universal cmdb browser/4.13
- version/microfocus universal cmdb browser/4.14
- version/microfocus universal cmdb browser/4.15.1
- canonical/microfocus cms server
- version/microfocus cms server/4.10
- version/microfocus cms server/4.11
- version/microfocus cms server/4.12
- version/microfocus cms server/4.13
- version/microfocus cms server/4.14
- version/microfocus cms server/4.15.1