# Vulnerabilities published in 2018 - [CVE-2018-6488](https://insights.sbomify.com/CVE-2018-6488/): MFSBGN03798 rev.1 - Micro Focus Universal CMDB, Apache Struts Instance (high 8.1) - [CVE-2018-6487](https://insights.sbomify.com/CVE-2018-6487/): MFSBGN03799 rev.1 - Micro Focus UCMDB, Remote Disclosure of Information (critical 9.8) - [CVE-2018-6486](https://insights.sbomify.com/CVE-2018-6486/): XML external entity in Fortify Audit Workbench (AWB) and Micro Focus Fortify Software Security Center (SSC) (high 7.3) - [CVE-2018-6485](https://insights.sbomify.com/CVE-2018-6485/): Integer overflow in n/a (critical 9.8) - [CVE-2018-6484](https://insights.sbomify.com/CVE-2018-6484/): Denial of service in n/a (medium 6.5) - [CVE-2018-6481](https://insights.sbomify.com/CVE-2018-6481/): Memory corruption in n/a (critical 9.8) - [CVE-2018-6480](https://insights.sbomify.com/CVE-2018-6480/): Memory corruption in n/a (high 8.8) - [CVE-2018-6479](https://insights.sbomify.com/CVE-2018-6479/): Denial of service in n/a (high 7.5) - [CVE-2018-6476](https://insights.sbomify.com/CVE-2018-6476/): Privilege escalation in n/a (critical 9.8) - [CVE-2018-6475](https://insights.sbomify.com/CVE-2018-6475/): Privilege escalation in n/a (high 7.8) - [CVE-2018-6474](https://insights.sbomify.com/CVE-2018-6474/): Denial of service in n/a (high 7.8) - [CVE-2018-6473](https://insights.sbomify.com/CVE-2018-6473/): Denial of service in n/a (high 7.8) - [CVE-2018-6472](https://insights.sbomify.com/CVE-2018-6472/): Denial of service in n/a (high 7.8) - [CVE-2018-6471](https://insights.sbomify.com/CVE-2018-6471/): Denial of service in n/a (high 7.8) - [CVE-2018-6470](https://insights.sbomify.com/CVE-2018-6470/): Information disclosure in n/a (medium 5.3) - [CVE-2018-6469](https://insights.sbomify.com/CVE-2018-6469/): Cross-site scripting in n/a (medium 6.1) - [CVE-2018-6468](https://insights.sbomify.com/CVE-2018-6468/): Cross-site scripting in n/a (medium 6.1) - [CVE-2018-6467](https://insights.sbomify.com/CVE-2018-6467/): Cross-site request forgery in n/a (high 8.8) - [CVE-2018-6466](https://insights.sbomify.com/CVE-2018-6466/): Cross-site scripting in n/a (medium 6.1) - [CVE-2018-6465](https://insights.sbomify.com/CVE-2018-6465/): Cross-site scripting in n/a (medium 6.1) - [CVE-2018-6464](https://insights.sbomify.com/CVE-2018-6464/): Simditor XSS Vulnerability (medium 6.1) - [CVE-2018-6462](https://insights.sbomify.com/CVE-2018-6462/): Memory corruption in n/a (high 7.8) - [CVE-2018-6461](https://insights.sbomify.com/CVE-2018-6461/): Other in n/a (high 7.8) - [CVE-2018-6460](https://insights.sbomify.com/CVE-2018-6460/): Information disclosure in n/a (high 7.5) - [CVE-2018-6459](https://insights.sbomify.com/CVE-2018-6459/): Denial of service in n/a (medium 5.3) - [CVE-2018-6458](https://insights.sbomify.com/CVE-2018-6458/): Cross-site request forgery in n/a (high 8.8) - [CVE-2018-6449](https://insights.sbomify.com/CVE-2018-6449/): Cross-site scripting in Brocade Fabric OS (medium 6.1) - [CVE-2018-6448](https://insights.sbomify.com/CVE-2018-6448/): Denial of service in Brocade Fabric OS (high 7.5) - [CVE-2018-6447](https://insights.sbomify.com/CVE-2018-6447/): Cross-site scripting in Brocade Fabric OS (medium 5.4) - [CVE-2018-6446](https://insights.sbomify.com/CVE-2018-6446/): Hardcoded credentials in Brocade Network Advisor (critical 9.8) - [CVE-2018-6445](https://insights.sbomify.com/CVE-2018-6445/): Information disclosure in Brocade Network Advisor (high 7.5) - [CVE-2018-6444](https://insights.sbomify.com/CVE-2018-6444/): A Vulnerability in Brocade Network Advisor versions before 14.1.0 could allow a remote unauthenticated attacker to execute arbitray code. (critical 9.8) - [CVE-2018-6443](https://insights.sbomify.com/CVE-2018-6443/): Hardcoded credentials in Brocade Network Advisor (high 8.1) - [CVE-2018-6442](https://insights.sbomify.com/CVE-2018-6442/): Command injection in Brocade Fabric OS (high 8.8) - [CVE-2018-6441](https://insights.sbomify.com/CVE-2018-6441/): Security feature bypass in Brocade Fabric OS (high 7.8) - [CVE-2018-6440](https://insights.sbomify.com/CVE-2018-6440/): Information disclosure in Brocade Fabric OS (critical 9.1) - [CVE-2018-6439](https://insights.sbomify.com/CVE-2018-6439/): Privilege escalation in Brocade Fabric OS (high 7.8) - [CVE-2018-6438](https://insights.sbomify.com/CVE-2018-6438/): Privilege escalation in Brocade Fabric OS (high 7.8) - [CVE-2018-6437](https://insights.sbomify.com/CVE-2018-6437/): Privilege escalation in Brocade Fabric OS (high 7.8) - [CVE-2018-6436](https://insights.sbomify.com/CVE-2018-6436/): Privilege escalation in Brocade Fabric OS (high 7.8) - [CVE-2018-6435](https://insights.sbomify.com/CVE-2018-6435/): Privilege escalation in Brocade Fabric OS (high 7.8) - [CVE-2018-6434](https://insights.sbomify.com/CVE-2018-6434/): Auth bypass in Brocade Fabric OS (high 7.5) - [CVE-2018-6433](https://insights.sbomify.com/CVE-2018-6433/): Missing authorization in Brocade Fabric OS (medium 5.5) - [CVE-2018-6414](https://insights.sbomify.com/CVE-2018-6414/): Memory corruption in DS-2DE4xxxW,DS-2DE5xxxW,DS-2DE7xxxW (critical 9.8) - [CVE-2018-6413](https://insights.sbomify.com/CVE-2018-6413/): Memory corruption in DS-2CD9111-S (high 7.5) - [CVE-2018-6412](https://insights.sbomify.com/CVE-2018-6412/): Information disclosure in n/a (high 7.5) - [CVE-2018-6411](https://insights.sbomify.com/CVE-2018-6411/): SQL injection in n/a (critical 9.8) - [CVE-2018-6410](https://insights.sbomify.com/CVE-2018-6410/): SQL injection in n/a (critical 9.8) - [CVE-2018-6409](https://insights.sbomify.com/CVE-2018-6409/): Path traversal in n/a (medium 5.3) - [CVE-2018-6408](https://insights.sbomify.com/CVE-2018-6408/): Cross-site request forgery in n/a (high 8.8) - [CVE-2018-6407](https://insights.sbomify.com/CVE-2018-6407/): Denial of service in n/a (high 7.5) - [CVE-2018-6406](https://insights.sbomify.com/CVE-2018-6406/): Memory corruption in n/a (high 8.8) - [CVE-2018-6405](https://insights.sbomify.com/CVE-2018-6405/): Denial of service in n/a (medium 6.5) - [CVE-2018-6402](https://insights.sbomify.com/CVE-2018-6402/): Security feature bypass in n/a (high 7.5) - [CVE-2018-6401](https://insights.sbomify.com/CVE-2018-6401/): Hardcoded credentials in n/a (critical 9.8) - [CVE-2018-6400](https://insights.sbomify.com/CVE-2018-6400/): Privilege escalation in n/a (high 7.8) - [CVE-2018-6398](https://insights.sbomify.com/CVE-2018-6398/): SQL injection in n/a (critical 9.8) - [CVE-2018-6397](https://insights.sbomify.com/CVE-2018-6397/): Path traversal in n/a (high 7.5) - [CVE-2018-6396](https://insights.sbomify.com/CVE-2018-6396/): SQL injection in n/a (critical 9.8) - [CVE-2018-6395](https://insights.sbomify.com/CVE-2018-6395/): SQL injection in n/a (critical 9.8) - [CVE-2018-6394](https://insights.sbomify.com/CVE-2018-6394/): SQL injection in n/a (critical 9.8) - [CVE-2018-6393](https://insights.sbomify.com/CVE-2018-6393/): SQL injection in n/a (high 7.2) - [CVE-2018-6392](https://insights.sbomify.com/CVE-2018-6392/): Memory corruption in n/a (medium 6.5) - [CVE-2018-6391](https://insights.sbomify.com/CVE-2018-6391/): Cross-site request forgery in n/a (high 8.8) - [CVE-2018-6390](https://insights.sbomify.com/CVE-2018-6390/): Denial of service in n/a (medium 6.5) - [CVE-2018-6389](https://insights.sbomify.com/CVE-2018-6389/): Denial of service in n/a (high 7.5) - [CVE-2018-6388](https://insights.sbomify.com/CVE-2018-6388/): Command injection in n/a (high 8.8) - [CVE-2018-6387](https://insights.sbomify.com/CVE-2018-6387/): Hardcoded credentials in n/a (critical 9.8) - [CVE-2018-6384](https://insights.sbomify.com/CVE-2018-6384/): Privilege escalation in n/a (high 7.8) - [CVE-2018-6383](https://insights.sbomify.com/CVE-2018-6383/): File upload in n/a (high 8.8) - [CVE-2018-6382](https://insights.sbomify.com/CVE-2018-6382/): SQL injection in n/a (low 3.3) - [CVE-2018-6381](https://insights.sbomify.com/CVE-2018-6381/): Memory corruption in n/a (medium 6.5) - [CVE-2018-6380](https://insights.sbomify.com/CVE-2018-6380/): Cross-site scripting in n/a (medium 6.1) - [CVE-2018-6379](https://insights.sbomify.com/CVE-2018-6379/): In Joomla! before 3.8.4, inadequate input filtering in the Uri class (formerly JUri) leads to an XSS vulnerability. (medium 6.1) - [CVE-2018-6378](https://insights.sbomify.com/CVE-2018-6378/): Cross-site scripting in n/a (medium 6.1) - [CVE-2018-6377](https://insights.sbomify.com/CVE-2018-6377/): Cross-site scripting in n/a (medium 6.1) - [CVE-2018-6376](https://insights.sbomify.com/CVE-2018-6376/): SQL injection in n/a (critical 9.8) - [CVE-2018-6374](https://insights.sbomify.com/CVE-2018-6374/): Security feature bypass in n/a (medium 6.5) - [CVE-2018-6373](https://insights.sbomify.com/CVE-2018-6373/): SQL injection in n/a (critical 9.8) - [CVE-2018-6372](https://insights.sbomify.com/CVE-2018-6372/): SQL injection in n/a (critical 9.8) - [CVE-2018-6370](https://insights.sbomify.com/CVE-2018-6370/): SQL injection in n/a (critical 9.8) - [CVE-2018-6368](https://insights.sbomify.com/CVE-2018-6368/): SQL injection in n/a (critical 9.8) - [CVE-2018-6367](https://insights.sbomify.com/CVE-2018-6367/): SQL injection in n/a (critical 9.8) - [CVE-2018-6365](https://insights.sbomify.com/CVE-2018-6365/): SQL injection in n/a (critical 9.8) - [CVE-2018-6364](https://insights.sbomify.com/CVE-2018-6364/): SQL injection in n/a (critical 9.8) - [CVE-2018-6363](https://insights.sbomify.com/CVE-2018-6363/): SQL injection in n/a (critical 9.8) - [CVE-2018-6362](https://insights.sbomify.com/CVE-2018-6362/): Cross-site scripting in n/a (medium 6.1) - [CVE-2018-6361](https://insights.sbomify.com/CVE-2018-6361/): Cross-site scripting in n/a (medium 6.1) - [CVE-2018-6360](https://insights.sbomify.com/CVE-2018-6360/): Code injection in n/a (high 8.8) - [CVE-2018-6359](https://insights.sbomify.com/CVE-2018-6359/): Use after free in n/a (high 8.8) - [CVE-2018-6358](https://insights.sbomify.com/CVE-2018-6358/): Memory corruption in n/a (high 8.8) - [CVE-2018-6357](https://insights.sbomify.com/CVE-2018-6357/): Cross-site request forgery in n/a (high 8.8) - [CVE-2018-6356](https://insights.sbomify.com/CVE-2018-6356/): Improper Limitation of a Pathname to a Restricted Directory in Jenkins (medium 6.5) - [CVE-2018-6355](https://insights.sbomify.com/CVE-2018-6355/): Cross-site scripting in n/a (medium 6.1) - [CVE-2018-6354](https://insights.sbomify.com/CVE-2018-6354/): Cross-site scripting in n/a (medium 6.1) - [CVE-2018-6353](https://insights.sbomify.com/CVE-2018-6353/): Code injection in n/a (high 7.8) - [CVE-2018-6352](https://insights.sbomify.com/CVE-2018-6352/): Denial of service in n/a (medium 5.5) - [CVE-2018-6350](https://insights.sbomify.com/CVE-2018-6350/): Memory corruption in WhatsApp Business for Android (critical 9.8) - [CVE-2018-6349](https://insights.sbomify.com/CVE-2018-6349/): Memory corruption in WhatsApp Business for Android (critical 9.8) - [CVE-2018-6347](https://insights.sbomify.com/CVE-2018-6347/): Denial of service in Proxygen (high 7.5) --- From sbomify Insights: https://insights.sbomify.com/years/2018/page/25/