CVE-2020-9520 - CVE House
Back to Database
Status published Medium CVE-2020-9520

A stored XSS vulnerability was discovered in Micro Focus Vibe,...

Vulnerability Description

A stored XSS vulnerability was discovered in Micro Focus Vibe, affecting all Vibe version prior to 4.0.7. The vulnerability could allows a remote attacker to craft and store malicious content into Vibe such that when the content is viewed by another user of the system, attacker controlled JavaScript will execute in the security context of the target user’s browser.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2020-9520

Credits & Attribution

No credits recorded in the NVD database.

References

More from Micro Focus International

View All →
CVE-2020-9521
An SQL injection vulnerability was discovered in Micro Focus Service...
High 8.8
CVE-2020-9519
HTTP methods reveled in Web services vulnerability in Micro Focus...
Medium 5.3
CVE-2020-9518
Login filter can access configuration files vulnerability in Micro Focus...
Medium 5.3
CVE-2020-9517
There is an improper restriction of rendered UI layers or...
Medium 5.4
CVE-2019-17087
Unauthorized file download vulnerability in all supported versions of Micro...
High 7.5

Affected Vendor

Micro Focus International

View all reports →

Affected Software

Micro Focus Vibe.
Vulnerable Versions:
All Vibe version prior to Vive 4.0.7.

Timeline

Official Publish: March 25th, 2020
Last Modified: August 4th, 2024
Added to House: July 21st, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.