CVE-2018-7681

—

CVSS 3.0

4.8 medium

EPSS

<1%p42

Published

Jun 21, 2018 (Jun 21, 2018)

Modified

Jun 17, 2026

Description

Micro Focus Solutions Business Manager versions prior to 11.4 allows JavaScript to be embedded in URLs placed in "Favorites" folder. If the user has certain administrative privileges then this vulnerability can impact other users in the system.

Vendors: microfocus
Products: solutions business manager
Weakness: CWE-79
Vector: CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N

NVD CVE.org GitHub PoCs EPSS (0.5%)

In the news0 stories

No ingested article mentions this CVE yet.