Stored XSS Vulnerability in Micro Focus Vibe
CVE-2020-9520

5.4MEDIUM

Key Information:

Vendor

Micro Focus International

Status
Micro Focus Vibe.
Vendor
CVE Published:
25 March 2020

What is CVE-2020-9520?

A stored Cross-Site Scripting (XSS) vulnerability exists in Micro Focus Vibe that allows a remote attacker to inject and store malicious scripts. This risk arises when users subsequently access the affected content, resulting in the execution of attacker-controlled JavaScript in their browser. All versions of Vibe prior to 4.0.7 are impacted by this vulnerability, posing significant security risks to user data and session integrity.

Affected Version(s)

Micro Focus Vibe. All Vibe version prior to Vive 4.0.7.

References

https://softwaresupport.softwaregrp.com/doc/KM03630475
x_refsource_MISC
http://seclists.org/fulldisclosure/2020/Mar/50
mailing-listx_refsource_FULLDISC

CVSS V3.1

Score:
5.4
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.