CVE-2018-6496
MFSBGN03809 rev.1 - Universal CMDB, Deserialization Java Objects and CSRF
Vexday Risk Score
21Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS 7.5EPSS 0.7%KEV nãoPoC —Nuclei —Metasploit —Patch —
Lifecycle
15 Jun 2018Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
Remote Cross-site Request forgery (CSRF) potential has been identified in UCMBD Browser version 4.10, 4.11, 4.12, 4.13, 4.14, 4.15, 4.15.1 which could allow for remote unsafe deserialization and cross-site request forgery (CSRF).
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Affected products
Micro Focus · UCMDB BrowserWant to know if your infrastructure is exposed to this?
Talk to TrueHacking →