CVE-2020-11845

Severity: medium (CVSS 6.1 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.8% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2020-05-19 · updated 2026-06-17
Weakness: CWE-79

Description

Cross Site Scripting vulnerability in Micro Focus Service Manager product. Affecting versions 9.50, 9.51, 9.52, 9.60, 9.61, 9.62, 9.63. The vulnerability could be exploited to allow remote attackers to inject arbitrary web script or HTML.

Affected products

Micro Focus Service Manager: from 9.50 through 9.63

References

https://softwaresupport.softwaregrp.com/doc/KM03640285
https://softwaresupport.softwaregrp.com/doc/KM03640285

Get alerted when CVE-2020-11845 or the next vulnerability affects your stack