CVE-2018-6495: Micro Focus CMS Server

Medium severity, CVSS 5.4. EPSS: 0.7% chance of exploitation in the next 30 days.

Cross-Site Scripting (XSS) in Micro Focus Universal CMDB, version 10.20, 10.21, 10.22, 10.30, 10.31, 10.32, 10.33, 11.0, CMS, version 4.10, 4.11, 4.12, 4.13, 4.14, 4.15.1 and Micro Focus UCMDB Browser, version 4.10, 4.11, 4.12, 4.13, 4.14, 4.15.1. This vulnerability could be remotely exploited to allow Cross-Site Scripting (XSS).

Affected products

• Micro Focus CMS Server: version 4.10 only; version 4.11 only; version 4.12 only; version 4.13 only; version 4.14 only; version 4.15.1 only
• Micro Focus Universal Cmdb: version 0.20 only; version 10.21 only; version 10.22 only; version 10.30 only; version 10.31 only; version 10.32 only; …
• Micro Focus Universal Cmdb Browser: version 4.10 only; version 4.11 only; version 4.12 only; version 4.13 only; version 4.14 only; version 4.15.1 only

Published 2018-05-23. Last modified 2026-06-17.