

Successful exploitation requires user interaction by the victim. The requirement for exploitation is a single authentication.

This vulnerability was named CVE-2018-6495 since. This vulnerability could be remotely exploited to allow Cross-Site Scripting (XSS). This would alter the appearance and would make it possible to initiate further attacks against site visitors.
#MICRO FOCUS UCMDB CODE#
An attacker might be able to inject arbitrary html and script code into the web site. As an impact it is known to affect integrity. The CWE definition for the vulnerability is CWE-79. The manipulation with an unknown input leads to a cross site scripting vulnerability. This vulnerability affects an unknown code block. A high score indicates an elevated risk to be targeted for this vulnerability.Ī vulnerability classified as problematic was found in Micro Focus Universal CMDB, CMS and UCMDB Browser ( Content Management System). The CTI Interest Score identifies the interest of attackers and the security community for this specific vulnerability in real-time.

Our Cyber Threat Intelligence team is monitoring different web sites, mailing lists, exploit markets and social media networks.
