Critical severity9.8NVD Advisory· Published Jun 21, 2018· Updated Jun 17, 2026

CVE-2018-7679

Description

Micro Focus Solutions Business Manager versions prior to 11.4 when ASP.NET is configured with execute permission on the virtual directories and does not validate the contents of user avatar images, could lead to remote code execution.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Microfocus/Solutions Business Managerllm-fuzzy
Range: <11.4
Micro Focus/Solutions Business Manager 11.4v5
Range: Solutions Business Manager 11.4 prior to 11.4

Patches

Vulnerability mechanics

References

help.serena.com/doc_center/sbm/ver11_4/sbm_release_notes.htmnvd

News mentions

No linked articles in our index yet.

cvss	0.637
epss	0.002
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000