CVEvulnerability

CVE-2019-11651

6.1 MEDIUM Published 2019-10-02 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2019-10-02
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
6.1 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
CVSS 2.0 ([email protected])
4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
Weaknesses
CWE-79

Description

Reflected XSS on Micro Focus Enterprise Developer and Enterprise Server, all versions prior to version 3.0 Patch Update 20, version 4.0 Patch Update 12, and version 5.0 Patch Update 2. The vulnerability could be exploited to redirect a user to a malicious page or forge certain types of web requests.

Affected configurations

• microfocus enterprise developer 3.0 • microfocus enterprise developer 4.0 • microfocus enterprise developer 5.0 • microfocus enterprise server 3.0 • microfocus enterprise server 4.0 • microfocus enterprise server 5.0

Related

Weakness · CWE (1)

  • CWE-79 Improper Neutralization of Input During Web Page Generation weakness

References