CVE-2020-9520: XSS
A stored XSS vulnerability was discovered in Micro Focus Vibe, affecting all Vibe version prior to 4.0.7. The vulnerability could allows a remote attacker to craft and store malicious content into Vibe such that when the content is viewed by another user of the system, attacker controlled JavaScript will execute in the security context of the target user’s browser.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Micro Focus Vibeto a version that resolves this vulnerability.Fixed in 4.0.7
Event History
Frequently Asked Questions
What is the severity of CVE-2020-9520?
CVE-2020-9520 is classified as a high severity vulnerability due to its potential impact on user data security.
How do I fix CVE-2020-9520?
To fix CVE-2020-9520, upgrade to Micro Focus Vibe version 4.0.7 or later.
What kind of attack does CVE-2020-9520 enable?
CVE-2020-9520 enables a stored XSS attack that can allow attackers to execute malicious JavaScript on victim users' browsers.
Which versions of Micro Focus Vibe are affected by CVE-2020-9520?
All versions of Micro Focus Vibe prior to 4.0.7 are affected by CVE-2020-9520.
Can CVE-2020-9520 be exploited remotely?
Yes, CVE-2020-9520 can be exploited remotely by an attacker with the ability to store malicious content within Micro Focus Vibe.