CVE-2020-9517

5.4 mediumEPSS 0.5%

Medium (5.4) in microfocus service manager. EPSS 0.5% chance of exploitation in the next 30 days.

There is an improper restriction of rendered UI layers or frames vulnerability in Micro Focus Service Manager Release Control versions 9.50 and 9.60. The vulnerability may result in the ability of malicious users to perform UI redress attacks.

Severity

CVSS 3.1

5.4 medium

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

EPSS: 0.5% chance of exploitation in the next 30 days; higher than 41% of CVEs (scores of 2026-10-31)
CWE: CWE-1021
Published: 2020-03-09
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

microfocus:service_manager

References

https://softwaresupport.softwaregrp.com/doc/KM03604692
https://softwaresupport.softwaregrp.com/doc/KM03604692

Check your stack JSON