What’s Vulnerable › Vulnerabilities

CVE-2018-6488: MFSBGN03798 rev.1 - Micro Focus Universal CMDB, Apache Struts Instance

• Severity: critical (CVSS 9.8 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.8% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2018-02-22 · updated 2026-06-17
• Weakness: CWE-94

Description

Arbitrary Code Execution vulnerability in Micro Focus Universal CMDB, version 4.10, 4.11, 4.12. This vulnerability could be remotely exploited to allow Arbitrary Code Execution.

Affected products

• Microfocus Ucmdb Configuration Manager: 4.10, 4.11, 4.12

References

• https://softwaresupport.softwaregrp.com/document/-/facetsearch/document/KM03086019
• https://softwaresupport.softwaregrp.com/document/-/facetsearch/document/KM03086019

Get alerted when CVE-2018-6488 or the next vulnerability affects your stack