CVE-2020-9520
Medium
Description
A stored XSS vulnerability was discovered in Micro Focus Vibe, affecting all Vibe version prior to 4.0.7. The vulnerability could allows a remote attacker to craft and store malicious content into Vibe such that when the content is viewed by another user of the system, attacker controlled JavaScript will execute in the security context of the target user’s browser.
SeverityMedium
CVSS5.4
Exploit probability—
ProductMicrofocus Vibe
PublishedMar 25, 2020
First seenMar 25, 2020
How to fix
Update
- microfocus vibe4.0.7 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| microfocus vibe | v < 4.0.7 | 4.0.7 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.