JavaScript Injection in Micro Focus Solutions Business Manager Favorites Folder

JavaScript Injection in Micro Focus Solutions Business Manager Favorites Folder

CVE-2018-7681 · LOW Severity

AV:N/AC:M/AU:S/C:N/I:P/A:N

Micro Focus Solutions Business Manager versions prior to 11.4 allows JavaScript to be embedded in URLs placed in "Favorites" folder. If the user has certain administrative privileges then this vulnerability can impact other users in the system.

Learn more about our User Device Pen Test.