CVE-2018-18591: MFSBGN03823 rev.1 - Micro Focus Service Manager, unauthorized disclosure of data

Severity: medium (CVSS 6.5 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.0% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2018-11-13 · updated 2026-06-17
Weakness: CWE-200

Description

A potential unauthorized disclosure of data vulnerability has been identified in Micro Focus Service Manager versions: 9.30, 9.31, 9.32, 9.33, 9.34, 9.35, 9.40, 9.41, 9.50, 9.51. The vulnerability could be exploited to release unauthorized disclosure of data.

Affected products

Micro Focus Service Manager: 9.30, 9.31, 9.32, 9.33, 9.34, 9.35 (+4)

References

https://softwaresupport.softwaregrp.com/document/-/facetsearch/document/KM03286176
https://softwaresupport.softwaregrp.com/document/-/facetsearch/document/KM03286176

Get alerted when CVE-2018-18591 or the next vulnerability affects your stack