What is CVE-2018-7679?

CVE-2018-7679 is a critical-severity vulnerability in Micro Focus Solutions Business Manager 11.4, classified under Improper Input Validation. CVSS score: 9.8/10. Published 2018-06-21.

How severe is CVE-2018-7679?

Critical severity. CVSS v3 base score is 9.8 out of 10.

Improper input validation in Micro Focus Solutions Business Manager 11.4

CVE-2018-7679

Micro Focus Solutions Business Manager versions prior to 11.4 when ASP.NET is configured with execute permission on the virtual directories and does not validate the contents of user avatar images, could lead to remote code execution.

Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)

EPSS: 0.023 (81.6th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 9.8 (Critical). Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H.

Affected products

Micro Focus Solutions Business Manager 11.4 — versions Solutions Business Manager 11.4 prior to 11.4
Microfocus Solutions_business_manager

Weakness classification (CWE)

CWE-20 — Improper Input Validation

References

security@opentext.com (x_refsource_CONFIRM)

Frequently asked questions

What is CVE-2018-7679?: CVE-2018-7679 is a critical-severity vulnerability in Micro Focus Solutions Business Manager 11.4, classified under Improper Input Validation. CVSS score: 9.8/10. Published 2018-06-21.
How severe is CVE-2018-7679?: Critical severity. CVSS v3 base score is 9.8 out of 10.