CVE-2018-7681
Last modified
CVE-2018-7681 is a vulnerability of currently unknown severity. Micro Focus Solutions Business Manager versions prior to 11.4 allows JavaScript to be embedded in URLs placed in "Favorites" folder. If the user has certain administrative privileges then this vulnerability can impact other users in the system.. EPSS estimates a 0.51% chance of exploitation in the next 30 days.
Description
Micro Focus Solutions Business Manager versions prior to 11.4 allows JavaScript to be embedded in URLs placed in "Favorites" folder. If the user has certain administrative privileges then this vulnerability can impact other users in the system.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Microfocus | Solutions Business Manager | < 11.4 |
References
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2018-7681?
How severe is CVE-2018-7681?
How do I fix CVE-2018-7681?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2018
- CVE-2018-7675In NetIQ Sentinel before 8.1.x, a Sentinel user is logged in…2.8
- CVE-2018-7676The NetIQ Identity Manager, in versions prior to 4.7, userap…3.9
- CVE-2018-7677A CSRF exposure exists in NetIQ Access Manager (NAM) 4.4 Ide…3.5
- CVE-2018-7678A cross site scripting vulnerability exist in the Administra…3.5
- CVE-2018-7679Micro Focus Solutions Business Manager versions prior to 11.…
- CVE-2018-7680Micro Focus Solutions Business Manager versions prior to 11.…
- CVE-2018-7682Micro Focus Solutions Business Manager versions prior to 11.…
- CVE-2018-7683Micro Focus Solutions Business Manager versions prior to 11.…
- CVE-2018-7685The decoupled download and installation steps in libzypp bef…7.8
- CVE-2018-7686Information leakage vulnerability in NetIQ eDirectory before…
- CVE-2018-7687The Micro Focus Client for OES before version 2 SP4 IR8a has…7.8
- CVE-2018-7688A missing permission check in the review handling of openSUS…7.1
Are you affected by CVE-2018-7681?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST