CVE-2018-7681: Micro Focus Solutions Business Manager versions prior to 11.4 allows JavaScript to be embedded in URLs plac...

Security readout for executives and security teams

This is a JavaScript-in-URL issue in Micro Focus Solutions Business Manager before 11.4. A user can place JavaScript in a Favorites URL. If that user has certain administrative privileges, the impact can extend to other users in the system. Exposure is limited to organizations running Micro Focus Solutions Business Manager versions before 11.4, especially where privileged users can create or manage Favorites that other users may access. Treat this as a targeted application hygiene issue, not an emergency based on current evidence. Prioritize remediation if SBM is still below 11.4 or privileged users can influence content seen by other users. Mitigation focus: Upgrade Micro Focus Solutions Business Manager to 11.4 or a later vendor-supported release.; Review the Serena/Micro Focus 11.4 release notes for vendor-specific remediation guidance.; Restrict administrative privileges that can affect other users' Favorites or shared content..

Prepared

Jun 7, 2026, 06:24 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.