CVE-2018-6495
Estado: ModificadaMedia (5.4)—
Cross-Site Scripting (XSS) in Micro Focus Universal CMDB, version 10.20, 10.21, 10.22, 10.30, 10.31, 10.32, 10.33, 11.0, CMS, version 4.10, 4.11, 4.12, 4.13, 4.14, 4.15.1 and Micro Focus UCMDB Browser, version 4.10, 4.11, 4.12, 4.13, 4.14, 4.15.1. This vulnerability could be remotely exploited to allow Cross-Site Scripting (XSS).
CVSS
- Versión: 3.1
- Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
- Puntuación base: 5.4
Probabilidad de explotación (EPSS)
- Probabilidad de explotación en los próximos 30 días: 0.66%
- Percentil entre todas las CVEs puntuadas: 50
- Fecha de la puntuación: 3/10/2026
EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).
Tecnologías afectadas (3)
CWE
- CWE-79
Referencias
JSON original (NVD)
Mostrar
{
"id": "CVE-2018-6495",
"cveTags": [],
"metrics": {
"cvssMetricV2": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"version": "2.0",
"baseScore": 3.5,
"accessVector": "NETWORK",
"vectorString": "AV:N/AC:M/Au:S/C:N/I:P/A:N",
"authentication": "SINGLE",
"integrityImpact": "PARTIAL",
"accessComplexity": "MEDIUM",
"availabilityImpact": "NONE",
"confidentialityImpact": "NONE"
},
"acInsufInfo": false,
"impactScore": 2.9,
"baseSeverity": "LOW",
"obtainAllPrivilege": false,
"exploitabilityScore": 6.8,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": true
}
],
"cvssMetricV30": [
{
"type": "Secondary",
"source": "security@opentext.com",
"cvssData": {
"scope": "UNCHANGED",
"version": "3.0",
"baseScore": 6.3,
"attackVector": "NETWORK",
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:H/A:N",
"integrityImpact": "HIGH",
"userInteraction": "REQUIRED",
"attackComplexity": "LOW",
"availabilityImpact": "NONE",
"privilegesRequired": "LOW",
"confidentialityImpact": "LOW"
},
"impactScore": 4.2,
"exploitabilityScore": 2.1
}
],
"cvssMetricV31": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"scope": "CHANGED",
"version": "3.1",
"baseScore": 5.4,
"attackVector": "NETWORK",
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
"integrityImpact": "LOW",
"userInteraction": "REQUIRED",
"attackComplexity": "LOW",
"availabilityImpact": "NONE",
"privilegesRequired": "LOW",
"confidentialityImpact": "LOW"
},
"impactScore": 2.7,
"exploitabilityScore": 2.3
}
]
},
"affected": [
{
"source": "security@opentext.com",
"affectedData": [
{
"vendor": "Micro Focus",
"product": "UCMDB",
"versions": [
{
"status": "affected",
"version": "10.20, 10.21, 10.22, 10.30, 10.31, 10.32, 10.33, 11.0"
}
]
},
{
"vendor": "Micro Focus",
"product": "CMS Server 2018.05",
"versions": [
{
"status": "affected",
"version": "4.10, 4.11, 4.12, 4.13, 4.14, 4.15.1"
}
]
},
{
"vendor": "Micro Focus",
"product": "UCMDB Browser",
"versions": [
{
"status": "affected",
"version": "4.10, 4.11, 4.12, 4.13, 4.14, 4.15.1"
}
]
}
]
}
],
"published": "2018-05-23T18:29:00.210",
"references": [
{
"url": "http://www.securitytracker.com/id/1040970",
"source": "security@opentext.com"
},
{
"url": "https://softwaresupport.softwaregrp.com/document/-/facetsearch/document/KM03164778",
"source": "security@opentext.com"
},
{
"url": "http://www.securitytracker.com/id/1040970",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://softwaresupport.softwaregrp.com/document/-/facetsearch/document/KM03164778",
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
],
"vulnStatus": "Modified",
"weaknesses": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"description": [
{
"lang": "en",
"value": "CWE-79"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Cross-Site Scripting (XSS) in Micro Focus Universal CMDB, version 10.20, 10.21, 10.22, 10.30, 10.31, 10.32, 10.33, 11.0, CMS, version 4.10, 4.11, 4.12, 4.13, 4.14, 4.15.1 and Micro Focus UCMDB Browser, version 4.10, 4.11, 4.12, 4.13, 4.14, 4.15.1. This vulnerability could be remotely exploited to allow Cross-Site Scripting (XSS)."
},
{
"lang": "es",
"value": "Cross-Site Scripting (XSS) en Micro Focus Universal CMDB, versiones 10.20, 10.21, 10.22, 10.30, 10.31, 10.32, 10.33 y 11.0; CMS, versiones 4.10, 4.11, 4.12, 4.13, 4.14 y 4.15.1 y Micro Focus UCMDB Browser, versiones 4.10, 4.11, 4.12, 4.13, 4.14 y 4.15.1. La vulnerabilidad se podría explotar de forma remota para permitir que se produzca Cross-Site Scripting (XSS)."
}
],
"lastModified": "2026-06-17T02:01:54.803",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:microfocus:universal_cmdb:0.20:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "73C5F6CB-C2C1-402D-AEAC-17637F122177"
},
{
"criteria": "cpe:2.3:a:microfocus:universal_cmdb:10.21:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "AD14CD0F-663F-4031-9A05-90DA1392FB40"
},
{
"criteria": "cpe:2.3:a:microfocus:universal_cmdb:10.22:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "FF5C04E5-B36A-4BBA-96F3-0BFBC77A8F61"
},
{
"criteria": "cpe:2.3:a:microfocus:universal_cmdb:10.30:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1936C1AB-E5E6-4374-86D4-CE42364EFE28"
},
{
"criteria": "cpe:2.3:a:microfocus:universal_cmdb:10.31:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F88185EB-DD55-42AF-8851-29E0915EB377"
},
{
"criteria": "cpe:2.3:a:microfocus:universal_cmdb:10.32:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C72A5164-6254-42E6-92ED-0777E11750B3"
},
{
"criteria": "cpe:2.3:a:microfocus:universal_cmdb:10.33:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "97E3B898-91B4-4B83-8804-DB5D4666C868"
},
{
"criteria": "cpe:2.3:a:microfocus:universal_cmdb:11.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4CA21558-3CC4-46DF-BF3B-2E222E5B9675"
}
],
"operator": "OR"
}
]
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:microfocus:universal_cmdb_browser:4.10:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "518B1E48-4196-4D4F-981E-93E38977FE65"
},
{
"criteria": "cpe:2.3:a:microfocus:universal_cmdb_browser:4.11:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "07FEF77E-BBDB-4FE2-AF32-20EB90DF987C"
},
{
"criteria": "cpe:2.3:a:microfocus:universal_cmdb_browser:4.12:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "72C869CE-825E-4EEA-B548-F09381BB0D6D"
},
{
"criteria": "cpe:2.3:a:microfocus:universal_cmdb_browser:4.13:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A1560306-6209-44FA-8A1B-DAEEEDE2C552"
},
{
"criteria": "cpe:2.3:a:microfocus:universal_cmdb_browser:4.14:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8C73577C-0ABB-4D54-BA1C-F0FAED48E7CC"
},
{
"criteria": "cpe:2.3:a:microfocus:universal_cmdb_browser:4.15.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "86AACCAC-41BE-4161-82D4-3B85C3E95275"
}
],
"operator": "OR"
}
]
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:microfocus:cms_server:4.10:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F13689EB-969C-4BA2-92A3-2FADEE380AD1"
},
{
"criteria": "cpe:2.3:a:microfocus:cms_server:4.11:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D20BDFF2-EEDF-4FCA-9515-489C4ACC1882"
},
{
"criteria": "cpe:2.3:a:microfocus:cms_server:4.12:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "AC354101-7C38-4896-A32A-1D0C994B0443"
},
{
"criteria": "cpe:2.3:a:microfocus:cms_server:4.13:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2342AE5F-EDB7-4A92-8BB8-9DD0C8D0E773"
},
{
"criteria": "cpe:2.3:a:microfocus:cms_server:4.14:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8348F195-63CB-4990-957E-E76DD79E858C"
},
{
"criteria": "cpe:2.3:a:microfocus:cms_server:4.15.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1563FF18-7FB8-44FA-9FA0-6AC5DE3E45F9"
}
],
"operator": "OR"
}
]
}
],
"sourceIdentifier": "security@opentext.com"
}