CVE-2018-7679

9.8 criticalEPSS 2.3%

Micro Focus Solutions Business Manager versions prior to 11.4 when ASP.NET is configured with execute permission on the virtual directories and does not validate the contents of user avatar images, could lead to remote code execution.

Severity

CVSS 3.0

9.8 critical

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 2.3% chance of exploitation in the next 30 days; higher than 83% of CVEs (scores of 2026-10-31)
CWE: CWE-20
Published: 2018-06-21
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

microfocus:solutions_business_manager

References

http://help.serena.com/doc_center/sbm/ver11_4/sbm_release_notes.htm
http://help.serena.com/doc_center/sbm/ver11_4/sbm_release_notes.htm

Check your stack JSON