CVE-2019-18942

4.8 mediumEPSS 0.3%

Medium (4.8) in microfocus solutions business manager. EPSS 0.3% chance of exploitation in the next 30 days.

Micro Focus Solutions Business Manager versions prior to 11.7.1 are vulnerable to stored XSS. The application reflects previously stored user input without encoding.

Severity

CVSS 3.1

4.8 medium

CVSS:3.1/AV:A/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

EPSS: 0.3% chance of exploitation in the next 30 days; higher than 24% of CVEs (scores of 2026-10-31)
CWE: CWE-79
Published: 2021-02-26
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

microfocus:solutions_business_manager

References

http://knowledgebase.serena.com/resources/sites/KNOWLEDGEBASE/content/live/SOLUTIONS/142000/S142001/en_US/sbm_11.7.1_security_bulletin.htm
http://knowledgebase.serena.com/resources/sites/KNOWLEDGEBASE/content/live/SOLUTIONS/142000/S142001/en_US/sbm_11.7.1_security_bulletin.htm

Check your stack JSON