CVE-2018-7681

4.8 mediumEPSS 0.5%

Micro Focus Solutions Business Manager versions prior to 11.4 allows JavaScript to be embedded in URLs placed in "Favorites" folder. If the user has certain administrative privileges then this vulnerability can impact other users in the system.

Severity

CVSS 3.0

4.8 medium

CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N

EPSS: 0.5% chance of exploitation in the next 30 days; higher than 43% of CVEs (scores of 2026-10-31)
CWE: CWE-79
Published: 2018-06-21
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

microfocus:solutions_business_manager

References

http://help.serena.com/doc_center/sbm/ver11_4/sbm_release_notes.htm
http://help.serena.com/doc_center/sbm/ver11_4/sbm_release_notes.htm

Check your stack JSON