This defect addresses the following CVE - CVE-2018-19644 - Reflected cross-site scripting Special thanks goes to Alessio Sergi of Verizon Enterprise Solutions for responsibly disclosing these CVEs
This defect addresses the following CVE - CVE-2018-19643 - Unauthenticated web services Special thanks goes to Alessio Sergi of Verizon Enterprise Solutions for responsibly disclosing these CVEs
This defect addresses the following CVE - CVE-2018-19642 - Denial of service attack Special thanks goes to Alessio Sergi of Verizon Enterprise Solutions for responsibly disclosing these CVEs
This defect and DEF326309 addresses the following CVE - CVE-2018-19641 - Unauthenticated remote code execution. Special thanks goes to Alessio Sergi of Verizon Enterprise Solutions for responsibly disclosing these CVEs
This defect and DEF326333 address the following CVE - CVE-2018-19641 - Unauthenticated remote code execution Special thanks goes to Alessio Sergi of Verizon Enterprise Solutions for responsibly disclosing these CVEs
This hotfix should only be applied on top of SBM 11.5. If you are running a different version or if you have already installed a different SBM 11.5 hotfix, contact Serena Support. Please note that these CVE's are also fixed in SBM 11.4.2 - please go to the Support Site downloads section if you require this version..
