CVE-2024-42852: Micro Focus Acutoweb

Medium severity, CVSS 6.1. EPSS: 0.8% chance of exploitation in the next 30 days.

Cross Site Scripting vulnerability in AcuToWeb server v.10.5.0.7577C8b allows a remote attacker to execute arbitrary code via the index.php component.

Affected products

• Micro Focus Acutoweb: version 10.5.0.7577C8b only

Published 2024-08-23. Last modified 2026-06-17.