« Volver al listado

CVE-2018-18589

Estado: ModificadaAlta (8.8)—

A potential Remote Arbitrary Code Execution vulnerability has been identified in Micro Focus' Real User Monitoring software, versions 9.26IP, 9.30, 9.40 and 9.50. The vulnerability could be exploited to execute arbitrary code.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Microfocus — Real User Monitoring

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2018-18589",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 6.5,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:S/C:P/I:P/A:P",
          "authentication": "SINGLE",
          "integrityImpact": "PARTIAL",
          "accessComplexity": "LOW",
          "availabilityImpact": "PARTIAL",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 6.4,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 8,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ],
    "cvssMetricV30": [
      {
        "type": "Secondary",
        "source": "security@opentext.com",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.0",
          "baseScore": 6.3,
          "attackVector": "NETWORK",
          "baseSeverity": "MEDIUM",
          "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
          "integrityImpact": "LOW",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "LOW",
          "privilegesRequired": "LOW",
          "confidentialityImpact": "LOW"
        },
        "impactScore": 3.4,
        "exploitabilityScore": 2.8
      },
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.0",
          "baseScore": 8.8,
          "attackVector": "NETWORK",
          "baseSeverity": "HIGH",
          "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
          "integrityImpact": "HIGH",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "LOW",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 5.9,
        "exploitabilityScore": 2.8
      }
    ]
  },
  "affected": [
    {
      "source": "security@opentext.com",
      "affectedData": [
        {
          "vendor": "Micro Focus",
          "product": "Microfocus Real User Monitoring",
          "versions": [
            {
              "status": "affected",
              "version": "9.26IP, 9.30, 9.40, 9.50"
            }
          ]
        }
      ]
    }
  ],
  "published": "2018-10-23T17:29:00.267",
  "references": [
    {
      "url": "https://softwaresupport.softwaregrp.com/document/-/facetsearch/document/KM03272900",
      "source": "security@opentext.com"
    },
    {
      "url": "https://softwaresupport.softwaregrp.com/document/-/facetsearch/document/KM03272900",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-502"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "A potential Remote Arbitrary Code Execution vulnerability has been identified in Micro Focus' Real User Monitoring software, versions 9.26IP, 9.30, 9.40 and 9.50. The vulnerability could be exploited to execute arbitrary code."
    },
    {
      "lang": "es",
      "value": "Se ha identificado una vulnerabilidad potencial de ejecución remota de código arbitrario en Micro Focus Real User Monitoring, en versiones 9.26IP, 9.30, 9.40 y 9.50. La vulnerabilidad podría ser explotada para ejecutar código arbitrario."
    }
  ],
  "lastModified": "2026-06-17T01:47:33.417",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:microfocus:real_user_monitoring:9.26ip:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "AE3C17FA-2520-465C-80D8-2510351265E3"
            },
            {
              "criteria": "cpe:2.3:a:microfocus:real_user_monitoring:9.30:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "3FD6AA1F-CEBB-46DC-A3E8-B91ADF00A156"
            },
            {
              "criteria": "cpe:2.3:a:microfocus:real_user_monitoring:9.40:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "885A49C2-B996-48B9-BB15-8B0E847C5DF4"
            },
            {
              "criteria": "cpe:2.3:a:microfocus:real_user_monitoring:9.50:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "BDA7B764-D8F8-492F-9CBA-DFA1A8D91991"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "security@opentext.com"
}