CyberSec.Space Logo
Back to CVE Browser

CVE-2018-6486

HIGH
7.3
CVSS Severity Score
EPSS Score0.1460%
EPSS Percentile33.15th
PublishedFeb 2, 2018
Last ModifiedNov 21, 2024

Vulnerability Description

XML External Entity (XXE) vulnerability in Micro Focus Fortify Audit Workbench (AWB) and Micro Focus Fortify Software Security Center (SSC), versions 16.10, 16.20, 17.10. This vulnerability could be exploited to allow a XML External Entity (XXE) injection.

Affected Platforms (CPE)

📦
Microfocus

Fortify Audit Workbench

= 16.10
📦
Microfocus

Fortify Audit Workbench

= 16.20
📦
Microfocus

Fortify Audit Workbench

= 17.10
📦
Microfocus

Fortify Software Security Center

= 16.10
📦
Microfocus

Fortify Software Security Center

= 16.20
📦
Microfocus

Fortify Software Security Center

= 17.10

References & Advisories

🔗 http://www.securityfocus.com/bid/102902
🔗 https://softwaresupport.softwaregrp.com/document/-/facetsearch/document/KM03083653
🔗 http://www.securityfocus.com/bid/102902
🔗 https://softwaresupport.softwaregrp.com/document/-/facetsearch/document/KM03083653

Related Vulnerabilities

CVE-2018-010110.0

A vulnerability in the Secure Sockets Layer (SSL) VPN functionality of the Cisco Adaptive Security Appliance (ASA) Software could ...

CVE-2018-487210.0

An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006...

CVE-2018-261110.0

Vulnerability in the Sun ZFS Storage Appliance Kit (AK) component of Oracle Sun Systems Products Suite (subcomponent: Core Service...

CVE-2018-100012410.0

I Librarian I-librarian version 4.8 and earlier contains a XML External Entity (XXE) vulnerability in line 154 of importmetadata.p...