8.1high
CVE-2018-6488
MFSBGN03798 rev.1 - Micro Focus Universal CMDB, Apache Struts Instance
Published 8 y ago · modified 4 mo ago · JSON
CVSS
8.1
v3.0 · CNA
CISA KEV
No
not known exploited
EPSS
1.8%
percentile 79%
Public exploits
0
none known
Summary
Arbitrary Code Execution vulnerability in Micro Focus Universal CMDB, version 4.10, 4.11, 4.12. This vulnerability could be remotely exploited to allow Arbitrary Code Execution.
Exploit prediction (EPSS)
1.81% probability of exploitation in the next 30 days, higher than 79% of all scored CVEs.
CVSS scores
| Assigned by | Version | Score | Vector |
|---|---|---|---|
| CNA | 3.0 | 8.1 | CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H |
| CNA | 3.0 | 8.1 | CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H |
| NVD | 3.0 | 9.8 | CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
| NVD | 2.0 | 7.5 | AV:N/AC:L/Au:N/C:P/I:P/A:P |
Affected products
- Micro Focus Micro Focus Universal CMDB
Classification
- Weakness
- CWE-94 Improper Control of Generation of Code
References
- softwaresupport.softwaregrp.com /document/-/facetsearch/document/KM03086019 · x_refsource_CONFIRM, x_transferred
Sources
- CVE List: CVE-2018-6488
- NVD: CVE-2018-6488
vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.