CVE-2018-19642: Solutions Business Manager (SBM) Denial of Service issue in version prior to 11.5

Security readout for executives and security teams

Micro Focus Solutions Business Manager versions before 11.5 have a denial-of-service issue that can affect availability. The available CVE data rates it medium severity and availability-only. Business urgency depends on whether SBM supports important workflows and whether attackers or untrusted users can reach the local system context. Exposure is limited to organizations running Micro Focus SBM versions earlier than 11.5. The CVSS local attack vector suggests risk is most relevant where local system access, shared hosts, or trusted automation boundaries are weak. The sources do not show remote internet exposure. Treat this as a moderate availability risk. If SBM is business-critical or deployed on shared systems, schedule remediation in the normal vulnerability cycle with higher priority for critical workflow environments. Mitigation focus: Inventory SBM deployments and confirm exact version numbers.; Prioritize upgrade planning for SBM versions earlier than 11.5.; Review the SBM 11.5 release notes and vendor guidance..

Prepared

Jun 1, 2026, 04:38 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.