title: MFSBGN03808 rev.1 - Micro Focus UCMDB, Cross-Site Scripting
description: Cross-Site Scripting (XSS) in Micro Focus Universal CMDB, version 10.20, 10.21, 10.22, 10.30, 10.31, 10.32, 10.33, 11.0, CMS, version 4.10, 4.11, 4.12, 4.13, 4.14, 4.15.1 and Micro Focus UCMDB Browser, version 4.10, 4.11, 4.12, 4.13, 4.14, 4.15.1. This vulnerability could be remotely exploited to allow Cross-Site Scripting (XSS).
problem types: Cross-Site Scripting (XSS)
affected:
{
product: UCMDB
vendor: Micro Focus
versions:
status: affected, version: 10.20, 10.21, 10.22, 10.30, 10.31, 10.32, 10.33, 11.0
}
{
product: CMS Server 2018.05
vendor: Micro Focus
versions:
status: affected, version: 4.10, 4.11, 4.12, 4.13, 4.14, 4.15.1
}
{
product: UCMDB Browser
vendor: Micro Focus
versions:
status: affected, version: 4.10, 4.11, 4.12, 4.13, 4.14, 4.15.1
}
metrics:
cvssV3_0: [
attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 6.3
baseSeverity: MEDIUM
confidentialityImpact: LOW
integrityImpact: HIGH
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:H/A:N
version: 3.0
]
exploits: Cross-Site Scripting (XSS)