Solutions Business Manager
Vendor:
First CVE: Jun 21, 2018 · Active for 8 years
17
Total CVEs
More Total CVEs than 94% of tracked products
5.7
Avg CVEs / Year
Higher CVE frequency than 91% of tracked products
6.8
Avg CVSS
Higher Avg CVSS than 40% of tracked products
0.0%
KEV Rate
Bottom 1%
Trends Over Time
The number and severity of CVEs published that impact Solutions Business Manager over time
Volume of CVEsAvg CVSS Base Score
First CVE
Jun 21, 2018
8 years ago
Most Recent CVE
Feb 26, 2021
1,978 days ago
CVE Severity & Scoring
Solutions Business Manager17 CVEs
47%
29%
18%
All CVEs353,173 CVEs
45%
40%
11%
LowMediumHighCritical
Attack Vector
Local0 (0.0%)
Network11 (64.7%)
Unknown0 (0.0%)
Physical0 (0.0%)
Adjacent Network6 (35.3%)
Attack Complexity
Low17 (100.0%)
High0 (0.0%)
Unknown0 (0.0%)
User Interaction
None10 (58.8%)
Unknown0 (0.0%)
Required7 (41.2%)
Privileges Required
Low7 (41.2%)
High1 (5.9%)
None9 (52.9%)
Unknown0 (0.0%)
Top CVEs
Signals from CVEs in this product scope (17 CVEs).
17 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2018-19641CRITICAL Unauthenticated remote code execution issue in Micro Focus Solutions Business Manager (SBM) (formerly Serena Business Manager (SBM)) versions prior to 11.5. | Mar 27, 2019 | 9.8 | 31 | NO | NO |
CVE-2018-7679CRITICAL Micro Focus Solutions Business Manager versions prior to 11.4 when ASP.NET is configured with execute permission on the virtual directories and does not validate the contents of us | Jun 21, 2018 | 9.8 | 30 | NO | NO |
CVE-2018-19645CRITICAL An Authentication Bypass issue exists in Solutions Business Manager (SBM) (formerly Serena Business Manager (SBM)) versions prior to 11.5. | Feb 12, 2019 | 9.8 | 28 | NO | NO |
CVE-2019-18945HIGH Micro Focus Solutions Business Manager Application Repository versions prior to 11.7.1 are vulnerable to privilege escalation vulnerability. | Feb 26, 2021 | 8.0 | 24 | NO | NO |
CVE-2019-18943HIGH Micro Focus Solutions Business Manager versions prior to 11.7.1 are vulnerable to XML External Entity Processing (XXE) on certain operations. | Feb 26, 2021 | 8.0 | 24 | NO | NO |
CVE-2018-7683HIGH Micro Focus Solutions Business Manager versions prior to 11.4 might reveal certain sensitive information in server log files. | Jun 21, 2018 | 7.5 | 24 | NO | NO |
CVE-2018-19643HIGH Information leakage issue in Micro Focus Solutions Business Manager (SBM) (formerly Serena Business Manager (SBM)) versions prior to 11.5. | Mar 27, 2019 | 7.5 | 23 | NO | NO |
CVE-2018-19642HIGH Denial of service issue in Micro Focus Solutions Business Manager (SBM) (formerly Serena Business Manager (SBM)) versions prior to 11.5. | Mar 27, 2019 | 7.5 | 23 | NO | NO |
CVE-2018-7682MEDIUM Micro Focus Solutions Business Manager versions prior to 11.4 allows a user to invoke SBM RESTful services across domains. | Jun 22, 2018 | 6.5 | 21 | NO | NO |
CVE-2019-3477MEDIUM Micro Focus Solution Business Manager versions prior to 11.4.2 is susceptible to open redirect. | Jun 7, 2019 | 6.1 | 20 | NO | NO |
Exploit Exposure
Signals from CVEs in this product scope (17 CVEs).
CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
0 CVEs
0.0% of CVEs· Bottom 1%
Social Chatter
Signals from CVEs in this product scope (17 CVEs).
Media Mentions
Signals from CVEs in this product scope (17 CVEs).
Top CNAs Publishing CVEs For Solutions Business Manager
Top CWEs
Versions
No cataloged versions.