CVE-2018-6496

—

CVSS 3.1

8.8 high

EPSS

<1%p53

Published

Jun 16, 2018 (Jun 16, 2018)

Modified

Jun 17, 2026

Description

Remote Cross-site Request forgery (CSRF) potential has been identified in UCMBD Browser version 4.10, 4.11, 4.12, 4.13, 4.14, 4.15, 4.15.1 which could allow for remote unsafe deserialization and cross-site request forgery (CSRF).

Vendors: microfocus
Products: universal cmbd browser
Weakness: CWE-352, CWE-502
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.7%)

In the news0 stories

No ingested article mentions this CVE yet.