9.8crit
CVE-2018-6487
MFSBGN03799 rev.1 - Micro Focus UCMDB, Remote Disclosure of Information
Published 8 y ago · modified 4 mo ago · JSON
CVSS
9.8
v3.0 · CNA
CISA KEV
No
not known exploited
EPSS
1.9%
percentile 79%
Public exploits
0
none known
Summary
Remote Disclosure of Information in Micro Focus Universal CMDB Foundation Software, version numbers 10.10, 10.11, 10.20, 10.21, 10.22, 10.30, 10.31, 4.10, 4.11. This vulnerability could be remotely exploited to allow disclosure of information.
Exploit prediction (EPSS)
1.87% probability of exploitation in the next 30 days, higher than 79% of all scored CVEs.
CVSS scores
| Assigned by | Version | Score | Vector |
|---|---|---|---|
| CNA | 3.0 | 9.8 | CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
| CNA | 3.0 | 9.8 | CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
| NVD | 3.0 | 7.5 | CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N |
| NVD | 2.0 | 5.0 | AV:N/AC:L/Au:N/C:P/I:N/A:N |
Affected products
- Micro Focus Universal CMDB Foundation Software
Classification
- Weakness
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor
References
- softwaresupport.softwaregrp.com /document/-/facetsearch/document/KM03091097 · x_refsource_CONFIRM, x_transferred
Sources
- CVE List: CVE-2018-6487
- NVD: CVE-2018-6487
vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.