Back to CVE Browser

CVE-2018-12463

CRITICAL

9.8

CVSS Severity Score

EPSS Score0.0840%

EPSS Percentile44.60th

PublishedJul 12, 2018

Last ModifiedNov 21, 2024

Vulnerability Description

An XML external entity (XXE) vulnerability in Fortify Software Security Center (SSC), version 17.1, 17.2, 18.1 allows remote unauthenticated users to read arbitrary files or conduct server-side request forgery (SSRF) attacks via a crafted DTD in an XML request.

Affected Platforms (CPE)

📦

Hp

Fortify Software Security Center

= 17.1

📦

Hp

Fortify Software Security Center

= 17.2

📦

Hp

Fortify Software Security Center

= 18.1

References & Advisories

🔗 http://www.securitytracker.com/id/1041286

🔗 https://softwaresupport.softwaregrp.com/document/-/facetsearch/document/KM03201563

🔗 https://www.exploit-db.com/exploits/45027/

🔗 http://www.securitytracker.com/id/1041286

🔗 https://softwaresupport.softwaregrp.com/document/-/facetsearch/document/KM03201563

🔗 https://www.exploit-db.com/exploits/45027/

Related Vulnerabilities

CVE-2018-64867.3

XML External Entity (XXE) vulnerability in Micro Focus Fortify Audit Workbench (AWB) and Micro Focus Fortify Software Security Cen...

CVE-2018-76906.5

A potential Remote Unauthorized Access in Micro Focus Fortify Software Security Center (SSC), versions 17.10, 17.20, 18.10 this ex...

CVE-2018-76916.5

A potential Remote Unauthorized Access in Micro Focus Fortify Software Security Center (SSC), versions 17.10, 17.20, 18.10 this ex...

CVE-2019-116495.4

Cross-Site Scripting vulnerability in Micro Focus Fortify Software Security Center Server, versions 17.2, 18.1, 18.2, has been ide...