CVE-2018-7680: Micro Focus Solutions Business Manager versions prior to 11.4 can reflect back HTTP header values.

Security readout for executives and security teams

Micro Focus Solutions Business Manager before version 11.4 could reflect HTTP header values back in responses. The public record is sparse, so business impact is not clearly stated. Treat this as a version-exposure issue for any remaining SBM deployments below 11.4, especially systems reachable by users or the internet. Exposure is likely limited to organizations running Micro Focus Solutions Business Manager versions earlier than 11.4. The sources do not identify specific modules, configurations, or authentication requirements. Set priority after confirming whether SBM is still deployed and below 11.4. With no severity score or exploitation evidence, urgency depends mainly on asset criticality and exposure. Mitigation focus: Inventory all Micro Focus Solutions Business Manager deployments and record exact versions.; Prioritize upgrade review for any instance running a version earlier than 11.4.; Check the vendor release notes and current support guidance before applying changes..

Prepared

Jun 7, 2026, 06:24 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.