CVE-2018-6488 — Code Injection in Focus Universal Cmdb

CWE-94 — Code Injection3 documents3 sources
Severity
9.8CRITICALNVD
CNA8.1
EPSS
0.7%
top 28.73%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Micro Focus Universal CmdbMicrofocus Ucmdb Configuration Manager
Timeline
PublishedFeb 22
Latest updateMay 13

Description

Arbitrary Code Execution vulnerability in Micro Focus Universal CMDB, version 4.10, 4.11, 4.12. This vulnerability could be remotely exploited to allow Arbitrary Code Execution.

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HExploitability: 3.9 | Impact: 5.9

Affected Packages2 packages

▶CVEListV5micro_focus/micro_focus_universal_cmdb4.10, 4.11, 4.12

🔴Vulnerability Details

2
GHSA
GHSA-chfm-fw34-93f8: Arbitrary Code Execution vulnerability in Micro Focus Universal CMDB, version 4↗2022-05-13
▶
CVEList
MFSBGN03798 rev.1 - Micro Focus Universal CMDB, Apache Struts Instance↗2018-02-22
▶
CVE-2018-6488 — Code Injection in Focus Universal Cmdb | cvebase