What is CVE-2020-9524?

CVE-2020-9524 is a medium-severity vulnerability in Microfocus Enterprise_developer, classified under Cross-site Scripting. CVSS score: 5.4/10. Published 2020-05-18.

How severe is CVE-2020-9524?

Medium severity. CVSS v3 base score is 5.4 out of 10.

XSS in Microfocus Enterprise_developer

CVE-2020-9524

Cross Site scripting vulnerability on Micro Focus Enterprise Server and Enterprise developer, affecting all versions prior to version 5.0 Patch Update 8. The vulnerability could allow an attacker to trigger administrative actions when an a…

Vulnerability class: XSS (Cross-Site Scripting)

EPSS: 0.005 (40.2th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 5.4 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N.

Affected products

Microfocus Enterprise_developer — versions 5.0
Microfocus Enterprise_server — versions 5.0
N/a Enterprise Server And Developer. — versions All versions prior to version 5.0 Patch Update 8.

Weakness classification (CWE)

CWE-79 — Cross-site Scripting

References

security@opentext.com (x_refsource_MISC)

Frequently asked questions

What is CVE-2020-9524?: CVE-2020-9524 is a medium-severity vulnerability in Microfocus Enterprise_developer, classified under Cross-site Scripting. CVSS score: 5.4/10. Published 2020-05-18.
How severe is CVE-2020-9524?: Medium severity. CVSS v3 base score is 5.4 out of 10.