High · 7.5 CVE-2018-6496 EUVD-2018-18252GHSA-3w65-72f9-frg9

MFSBGN03809 rev.1 - Universal CMDB, Deserialization Java Objects and CSRF

Published Jun 15, 2018 · Updated Aug 5, 2024 · Assigned by microfocus

Vendor: Micro Focus Product: UCMDB Browser

Description

Remote Cross-site Request forgery (CSRF) potential has been identified in UCMBD Browser version 4.10, 4.11, 4.12, 4.13, 4.14, 4.15, 4.15.1 which could allow for remote unsafe deserialization and cross-site request forgery (CSRF).

Affected products

Vendor	Product	Affected	Fixed
Micro Focus	UCMDB Browser	4.10, 4.11, 4.12, 4.13, 4.14, 4.15, 4.15.1	—

References

104483 vdb-entry
1041139 vdb-entry
https://softwaresupport.softwaregrp.com/document/-/facetsearch/document/KM03180066