Back
CVE-2018-6491
MFSBGN03803 rev.1 - UCMDB, Installation File Access Control Privilege Escalation Vulnerability
High8.1EPSS 0.99%
- Published
- Updated
- Reserved
- Assigned by
- microfocus
Description
Local Escalation of Privilege vulnerability to Micro Focus Universal CMDB, versions 10.20, 10.21, 10.22, 10.30, 10.31, 10.32, 10.33, 11.00. The vulnerability could be remotely exploited to Local Escalation of Privilege.
Scores
| Scored by | CVSS | Score | Vector |
|---|---|---|---|
| microfocusCNA (assigner) | 3.0 | High8.1 | CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H |
| NVDNVD · Modified | 3.0 | Critical9.8 | CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
- EPSS (exploitation in 30 days)
- 0.99% · top 37% of all CVEs (3 Nov 2026)
Loading the EPSS history…
The list uses the assigner's score when there is one, then CISA's, then NVD's: High 8.1.
Weakness
- Local Escalation of Privilege
Affected products
Micro Focus · Universal CMDB
- affected 10.20, 10.21, 10.22, 10.30, 10.31, 10.32, 10.33, 11.00
What to do
Exploitation: Local Escalation of Privilege
References (2)
- 1040680 (opens in a new tab)vdb-entryx_refsource_SECTRACKx_transferred
- https://softwaresupport.softwaregrp.com/document/-/facetsearch/document/KM03141180 (opens in a new tab)x_refsource_CONFIRMx_transferred
Sources
The same CVE in the primary databases and aggregators, to check against.
- CVE.org record (opens in a new tab)
- CVE List JSON (GitHub) (opens in a new tab)
- NVD (opens in a new tab)
- FIRST EPSS (opens in a new tab)
- OSV.dev (opens in a new tab)
- GitHub Advisories (opens in a new tab)
- CIRCL Vulnerability-Lookup (opens in a new tab)
Record last updated .