CVE-2018-6495: MFSBGN03808 rev.1 - Micro Focus UCMDB, Cross-Site Scripting

Security readout for executives and security teams

CVE-2018-6495 is a cross-site scripting issue in Micro Focus UCMDB, CMS, and UCMDB Browser. An attacker with low privileges could use it to affect another user's browser session, potentially changing data or actions shown in the application. It is rated medium, not known from the provided sources to be actively exploited. Exposure is most likely where affected Micro Focus UCMDB, CMS, or UCMDB Browser versions remain deployed and reachable by authenticated users. These products are often operationally sensitive because they map configuration and service relationships, but the bundle does not state internet exposure prevalence. Treat this as a moderate-priority remediation item, especially for systems used by administrators or service-management teams. It is not KEV-listed, but XSS in configuration-management tooling can undermine trust in operational data and user actions. Mitigation focus: Review Micro Focus advisory KM03164778 for supported fixes, workarounds, and support status.; Upgrade or retire affected versions according to vendor guidance.; Restrict access to affected consoles to trusted users while remediation is planned..

Prepared

May 25, 2026, 03:52 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.