CVE-2019-18942 — Stored cross site scripting

CVE-2019-18942

Stored cross site scripting PUBLISHED

Description (CNA)

Micro Focus Solutions Business Manager versions prior to 11.7.1 are vulnerable to stored XSS. The application reflects previously stored user input without encoding.

Affected (CNA)

Vendor / product	Versions
Micro Focus / Solutions Business Manager	affected < 11.7.1

CWE

CWE-79

References

http://knowledgebase.serena.com/resources/sites/KNOWLEDGEBASE/content/live/SOLUTIONS/142000/S142001/en_US/sbm_11.7.1_security_bulletin.htm

ADP enrichment

CVE

No English description supplied.

http://knowledgebase.serena.com/resources/sites/KNOWLEDGEBASE/content/live/SOLUTIONS/142000/S142001/en_US/sbm_11.7.1_security_bulletin.htm