CVE-2018-6488

9.8 criticalEPSS 1.8%

Critical (9.8) in microfocus ucmdb configuration manager. EPSS 1.8% chance of exploitation in the next 30 days.

Arbitrary Code Execution vulnerability in Micro Focus Universal CMDB, version 4.10, 4.11, 4.12. This vulnerability could be remotely exploited to allow Arbitrary Code Execution.

Severity

CVSS 3.0

9.8 critical

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 1.8% chance of exploitation in the next 30 days; higher than 78% of CVEs (scores of 2026-10-31)
CWE: CWE-94
Published: 2018-02-22
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

microfocus:ucmdb_configuration_manager

References

https://softwaresupport.softwaregrp.com/document/-/facetsearch/document/KM03086019
https://softwaresupport.softwaregrp.com/document/-/facetsearch/document/KM03086019

Check your stack JSON