Vulnerability Description
Remote Cross-site Request forgery (CSRF) potential has been identified in UCMBD Browser version 4.10, 4.11, 4.12, 4.13, 4.14, 4.15, 4.15.1 which could allow for remote unsafe deserialization and cross-site request forgery (CSRF).
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Microfocus | Universal Cmbd Browser | >= 4.10, <= 4.15.1 |
Related Weaknesses (CWE)
References
- http://www.securityfocus.com/bid/104483
- http://www.securitytracker.com/id/1041139
- https://softwaresupport.softwaregrp.com/document/-/facetsearch/document/KM031800
- http://www.securityfocus.com/bid/104483
- http://www.securitytracker.com/id/1041139
- https://softwaresupport.softwaregrp.com/document/-/facetsearch/document/KM031800
FAQ
What is CVE-2018-6496?
CVE-2018-6496 is a vulnerability with a CVSS score of 8.8 (HIGH). Remote Cross-site Request forgery (CSRF) potential has been identified in UCMBD Browser version 4.10, 4.11, 4.12, 4.13, 4.14, 4.15, 4.15.1 which could allow for remote unsafe deserialization and cross...
How severe is CVE-2018-6496?
CVE-2018-6496 has been rated HIGH with a CVSS base score of 8.8/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2018-6496?
Check the references section above for vendor advisories and patch information. Affected products include: Microfocus Universal Cmbd Browser.