← Back

CVE-2018-18589

nvd nist
Published: Oct 23, 2018Modified: Nov 21, 2024

JSON object

Loading...
8.8
Vector
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Exploitability: 2.8 / Impact: 5.9
Source: NVD

Description

A potential Remote Arbitrary Code Execution vulnerability has been identified in Micro Focus' Real User Monitoring software, versions 9.26IP, 9.30, 9.40 and 9.50. The vulnerability could be exploited to execute arbitrary code.

Affected (4)

Microfocus
1 product
Real User Monitoring
Configuration A
4 vulnerable
Vulnerable SoftwareAffected Versions
Microfocus
Real User Monitoring
Version 9.26ip
Real User Monitoring
Version 9.30
Real User Monitoring
Version 9.40
Real User Monitoring
Version 9.50

Related CWEs

CWE-502
Deserialization of Untrusted Data
The product deserializes untrusted data without sufficiently verifying that the resulting data will be valid.

References (2)

Source: security@opentext.com
Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.