Approved changes feed: RSS · Atom

cpe:2.3:a:micro_focus:ucmdb_browser:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorMicro Focus (f9f1280f-7695-55fd-8646-33f8e43ba3b1)
ProductUcmdb Browser (6942a5f1-182c-5bb9-a8a9-0d6644813806)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2018-6496 vulnerable 2026-06-08 05:11:53.852811 MFSBGN03809 rev.1 - Universal CMDB, Deserialization Java Objects and CSRF
HIGH (7.5)
Remote Cross-site Request forgery (CSRF) potential has been identified in UCMBD Browser version 4.10, 4.11, 4.12, 4.13, 4.14, 4.15, 4.15.1 which could allow for remote unsafe deserialization and cross-site request forgery (CSRF).
Published: 2018-06-15T21:00:00.000Z
Updated: 2024-08-05T06:01:49.082Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-6495 vulnerable 2026-06-08 05:11:53.841527 MFSBGN03808 rev.1 - Micro Focus UCMDB, Cross-Site Scripting
MEDIUM (6.3)
Cross-Site Scripting (XSS) in Micro Focus Universal CMDB, version 10.20, 10.21, 10.22, 10.30, 10.31, 10.32, 10.33, 11.0, CMS, version 4.10, 4.11, 4.12, 4.13, 4.14, 4.15.1 and Micro Focus UCMDB Browser, version 4.10, 4.11, 4.12, 4.13, 4.14, 4.15.1. This vulnerability could be remotely exploited to allow Cross-Site Scripting (XSS).
Published: 2018-05-23T18:00:00.000Z
Updated: 2024-09-16T17:14:33.396Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.