CVE-2020-11845

6.1 mediumEPSS 0.8%

Medium (6.1) in microfocus service manager. EPSS 0.8% chance of exploitation in the next 30 days.

Cross Site Scripting vulnerability in Micro Focus Service Manager product. Affecting versions 9.50, 9.51, 9.52, 9.60, 9.61, 9.62, 9.63. The vulnerability could be exploited to allow remote attackers to inject arbitrary web script or HTML.

Severity

CVSS 3.1

6.1 medium

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

EPSS: 0.8% chance of exploitation in the next 30 days; higher than 55% of CVEs (scores of 2026-10-31)
CWE: CWE-79
Published: 2020-05-19
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

microfocus:service_manager

References

https://softwaresupport.softwaregrp.com/doc/KM03640285
https://softwaresupport.softwaregrp.com/doc/KM03640285

Check your stack JSON