Back
CVE-2018-6487
MFSBGN03799 rev.1 - Micro Focus UCMDB, Remote Disclosure of Information
Critical9.8EPSS 1.9%
- Published
- Updated
- Reserved
- Assigned by
- microfocus
Description
Remote Disclosure of Information in Micro Focus Universal CMDB Foundation Software, version numbers 10.10, 10.11, 10.20, 10.21, 10.22, 10.30, 10.31, 4.10, 4.11. This vulnerability could be remotely exploited to allow disclosure of information.
Scores
| Scored by | CVSS | Score | Vector |
|---|---|---|---|
| microfocusCNA (assigner) | 3.0 | Critical9.8 | CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
| NVDNVD · Modified | 3.0 | High7.5 | CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N |
- EPSS (exploitation in 30 days)
- 1.9% · top 21% of all CVEs (3 Nov 2026)
Loading the EPSS history…
The list uses the assigner's score when there is one, then CISA's, then NVD's: Critical 9.8.
Weakness
- Remote Disclosure of Information
- CWE-200 (opens in a new tab)Other CVEs with CWE-200
Affected products
Micro Focus · Universal CMDB Foundation Software
- affected 10.10, 10.11, 10.20, 10.21, 10.22, 10.30, 10.31, 4.10, 4.11
What to do
Exploitation: Remote Disclosure of Information
References (1)
- https://softwaresupport.softwaregrp.com/document/-/facetsearch/document/KM03091097 (opens in a new tab)x_refsource_CONFIRMx_transferred
Sources
The same CVE in the primary databases and aggregators, to check against.
- CVE.org record (opens in a new tab)
- CVE List JSON (GitHub) (opens in a new tab)
- NVD (opens in a new tab)
- FIRST EPSS (opens in a new tab)
- OSV.dev (opens in a new tab)
- GitHub Advisories (opens in a new tab)
- CIRCL Vulnerability-Lookup (opens in a new tab)
Badge for a README or a ticket
[](https://trackcve.app/cve/CVE-2018-6487)Record last updated .