5.4
CVE-2020-9517
- EPSS 0.48%
- Veröffentlicht 09.03.2020 16:15:16
- Zuletzt bearbeitet 21.11.2024 05:40:47
- Erkennungen
LoginThere is an improper restriction of rendered UI layers or frames vulnerability in Micro Focus Service Manager Release Control versions 9.50 and 9.60. The vulnerability may result in the ability of malicious users to perform UI redress attacks.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Microfocus ≫ Service Manager Version 9.50
Microfocus ≫ Service Manager Version 9.60 Update -
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.48% | 0.377 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| NIST | 5.4 | 2.3 | 2.7 |
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
|
| NIST | 4.9 | 6.8 | 4.9 |
AV:N/AC:M/Au:S/C:P/I:P/A:N
|
CWE-1021 Improper Restriction of Rendered UI Layers or Frames
The web application does not restrict or incorrectly restricts frame objects or UI layers that belong to another application or domain.
https://softwaresupport.softwaregrp.com/doc/KM03604692