CVE-2018-6486: MFSBGN03797 rev.1 - Micro Focus Fortify Audit Workbench (AWB) and Micro Focus Fortify Software Security Center (SSC), XML External Entity Injection
First published: Fri Feb 02 2018(Updated: )
XML External Entity (XXE) vulnerability in Micro Focus Fortify Audit Workbench (AWB) and Micro Focus Fortify Software Security Center (SSC), versions 16.10, 16.20, 17.10. This vulnerability could be exploited to allow a XML External Entity (XXE) injection.
Credit: meissner@suse.de
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Microfocus Fortify Audit Workbench | =16.10 | |
| Microfocus Fortify Audit Workbench | =16.20 | |
| Microfocus Fortify Audit Workbench | =17.10 | |
| Microfocus Fortify Software Security Center | =16.10 | |
| Microfocus Fortify Software Security Center | =16.20 | |
| Microfocus Fortify Software Security Center | =17.10 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- collector/nvd-index
- agent/references
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/severity
- agent/title
- agent/weakness
- agent/author
- agent/first-publish-date
- agent/tags
- agent/description
- agent/event
- vendor/microfocus
- canonical/microfocus fortify audit workbench
- version/microfocus fortify audit workbench/16.10
- version/microfocus fortify audit workbench/16.20
- version/microfocus fortify audit workbench/17.10
- canonical/microfocus fortify software security center
- version/microfocus fortify software security center/16.10
- version/microfocus fortify software security center/16.20
- version/microfocus fortify software security center/17.10