Overview
- Description
- XML External Entity (XXE) vulnerability in Micro Focus Fortify Audit Workbench (AWB) and Micro Focus Fortify Software Security Center (SSC), versions 16.10, 16.20, 17.10. This vulnerability could be exploited to allow a XML External Entity (XXE) injection.
- Source
- security@opentext.com
- NVD status
- Modified
Risk scores
CVSS 3.0
- Type
- Primary
- Base score
- 9.8
- Impact score
- 5.9
- Exploitability score
- 3.9
- Vector string
- CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- Severity
- CRITICAL
CVSS 2.0
- Type
- Primary
- Base score
- 7.5
- Impact score
- 6.4
- Exploitability score
- 10
- Vector string
- AV:N/AC:L/Au:N/C:P/I:P/A:P
Weaknesses
- nvd@nist.gov
- CWE-611
Social media
- Hype score
- Not currently trending
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:microfocus:fortify_audit_workbench:16.10:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "DCAC9EC0-3C36-465E-9687-B61BB7E5CD2B"
},
{
"criteria": "cpe:2.3:a:microfocus:fortify_audit_workbench:16.20:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "ADB15BAB-2A01-4505-B23A-6733FEA144F8"
},
{
"criteria": "cpe:2.3:a:microfocus:fortify_audit_workbench:17.10:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "52BE8B0D-5180-4277-9A5B-0DF0C89A9FDB"
}
],
"operator": "OR"
}
]
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:microfocus:fortify_software_security_center:16.10:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "BA657021-3719-4055-BE1F-6402E976D68E"
},
{
"criteria": "cpe:2.3:a:microfocus:fortify_software_security_center:16.20:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4C7D5750-8985-4AE0-B3AE-D31E278027AC"
},
{
"criteria": "cpe:2.3:a:microfocus:fortify_software_security_center:17.10:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9E137D7D-8108-4EE2-9800-EAC66AB82D77"
}
],
"operator": "OR"
}
]
}
]