Code injection

2018-06-2119:29:00

PRIOn knowledge base

www.prio-n.com

5.1 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

21.9%

JSON

Micro Focus Solutions Business Manager versions prior to 11.4 allows JavaScript to be embedded in URLs placed in “Favorites” folder. If the user has certain administrative privileges then this vulnerability can impact other users in the system.

CPENameOperatorVersion
solutions_business_managerlt11.4

CPE	Name	Operator	Version
	solutions_business_manager	lt	11.4

References

help.serena.com/doc_center/sbm/ver11_4/sbm_release_notes.htm