Vulnerabilities > CVE-2018-6496 - Deserialization of Untrusted Data vulnerability in Microfocus Universal Cmbd Browser

047910
CVSS 8.8 - HIGH
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
HIGH
Integrity impact
HIGH
Availability impact
HIGH
network
low complexity
microfocus
CWE-502
NVD
Published: 2018-06-16
Updated: 2024-11-21

Summary

Remote Cross-site Request forgery (CSRF) potential has been identified in UCMBD Browser version 4.10, 4.11, 4.12, 4.13, 4.14, 4.15, 4.15.1 which could allow for remote unsafe deserialization and cross-site request forgery (CSRF).

Vulnerable Configurations

Part Description Count
Application
Microfocus
5

Common Weakness Enumeration (CWE)

References