CVE-2020-11845

Cross Site Scripting vulnerability in Micro Focus Service Manager product. Affecting versions 9.50, 9.51, 9.52, 9.60, 9.61, 9.62, 9.63. The vulnerability could be exploited to allow remote attackers to inject arbitrary web script or HTML.
Configurations

Configuration 1 (hide)

cpe:2.3:a:microfocus:service_manager:*:*:*:*:*:*:*:*

History

21 Nov 2024, 04:58

Type Values Removed Values Added
References () https://softwaresupport.softwaregrp.com/doc/KM03640285 - () https://softwaresupport.softwaregrp.com/doc/KM03640285 -

07 Nov 2023, 03:15

Type Values Removed Values Added
References (MISC) https://softwaresupport.softwaregrp.com/doc/KM03640285 - Vendor Advisory () https://softwaresupport.softwaregrp.com/doc/KM03640285 -

Information

Published : 2020-05-19 15:15

Updated : 2024-11-21 04:58


NVD link : CVE-2020-11845

Mitre link : CVE-2020-11845

CVE.ORG link : CVE-2020-11845


JSON object : View

Products Affected

microfocus

  • service_manager
CWE
CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')