Stored XSS Vulnerability in Micro Focus Vibe
CVE-2020-9520

5.4MEDIUM

Key Information:

Vendor

Micro Focus International

Status
Micro Focus Vibe.
Vendor
CVE Published:
25 March 2020

What is CVE-2020-9520?

A stored Cross-Site Scripting (XSS) vulnerability exists in Micro Focus Vibe that allows a remote attacker to inject and store malicious scripts. This risk arises when users subsequently access the affected content, resulting in the execution of attacker-controlled JavaScript in their browser. All versions of Vibe prior to 4.0.7 are impacted by this vulnerability, posing significant security risks to user data and session integrity.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

Micro Focus Vibe. All Vibe version prior to Vive 4.0.7.

References

https://softwaresupport.softwaregrp.com/doc/KM03630475
x_refsource_MISC
http://seclists.org/fulldisclosure/2020/Mar/50
mailing-listx_refsource_FULLDISC

CVSS V3.1

Score:
5.4
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.