CVEブラウザに戻る

CVE-2018-12463

CRITICAL

9.8

CVSS Severity Score

EPSS Score0.0840%

EPSS Percentile44.60th

Published2018年7月12日

Last Modified2024年11月21日

Vulnerability Description

An XML external entity (XXE) vulnerability in Fortify Software Security Center (SSC), version 17.1, 17.2, 18.1 allows remote unauthenticated users to read arbitrary files or conduct server-side request forgery (SSRF) attacks via a crafted DTD in an XML request.

Affected Platforms (CPE)

📦

Hp

Fortify Software Security Center

= 17.1

📦

Hp

Fortify Software Security Center

= 17.2

📦

Hp

Fortify Software Security Center

= 18.1

References & Advisories

🔗 http://www.securitytracker.com/id/1041286

🔗 https://softwaresupport.softwaregrp.com/document/-/facetsearch/document/KM03201563

🔗 https://www.exploit-db.com/exploits/45027/

🔗 http://www.securitytracker.com/id/1041286

🔗 https://softwaresupport.softwaregrp.com/document/-/facetsearch/document/KM03201563

🔗 https://www.exploit-db.com/exploits/45027/

関連する脆弱性情報

CVE-2018-64867.3

XML External Entity (XXE) vulnerability in Micro Focus Fortify Audit Workbench (AWB) and Micro Focus Fortify Software Security Cen...

CVE-2018-76906.5

A potential Remote Unauthorized Access in Micro Focus Fortify Software Security Center (SSC), versions 17.10, 17.20, 18.10 this ex...

CVE-2018-76916.5

A potential Remote Unauthorized Access in Micro Focus Fortify Software Security Center (SSC), versions 17.10, 17.20, 18.10 this ex...

CVE-2019-116495.4

Cross-Site Scripting vulnerability in Micro Focus Fortify Software Security Center Server, versions 17.2, 18.1, 18.2, has been ide...