CVE-2018-6486

XML External Entity (XXE) vulnerability in Micro Focus Fortify Audit Workbench (AWB) and Micro Focus Fortify Software Security Center (SSC), versions 16.10, 16.20, 17.10. This vulnerability could be exploited to allow a XML External Entity (XXE) injection.

Score

CVSS 3.0 9.8 Critical

Status

Modified - security@opentext.com

Published

2018-02-02

Last modified

2024-09-16

Weaknesses

CWE-611

Affected products

• Fortify Audit Workbench Awb And Micro Focus Fortify Software Security Center Ssc (Micro Focus)
• Fortify Audit Workbench (Microfocus)
• Fortify Software Security Center (Microfocus)

References

• http://www.securityfocus.com/bid/102902
• https://softwaresupport.softwaregrp.com/document/-/facetsearch/document/KM03083653