CVE-2019-17085: XEE
First published: Mon Nov 18 2019(Updated: )
XXE attack vulnerability on Micro Focus Operations Agent, affected version 12.0, 12.01, 12.02, 12.03, 12.04, 12.05, 12.06, 12.10, 12.11. The vulnerability could be exploited to do an XXE attack on Operations Agent.
Credit: security@microfocus.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Microfocus Operations Agent | =12.0 | |
| Microfocus Operations Agent | =12.01 | |
| Microfocus Operations Agent | =12.02 | |
| Microfocus Operations Agent | =12.03 | |
| Microfocus Operations Agent | =12.04 | |
| Microfocus Operations Agent | =12.05 | |
| Microfocus Operations Agent | =12.06 | |
| Microfocus Operations Agent | =12.10 | |
| Microfocus Operations Agent | =12.11 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is CVE-2019-17085?
CVE-2019-17085 is an XXE attack vulnerability on Micro Focus Operations Agent, affected versions 12.0 through 12.11.
What is an XXE attack?
An XXE (XML External Entity) attack is a type of attack that exploits vulnerabilities in XML parsers to disclose sensitive information or execute remote code.
How does CVE-2019-17085 affect Micro Focus Operations Agent?
CVE-2019-17085 allows an attacker to perform an XXE attack on Micro Focus Operations Agent.
What is the severity level of CVE-2019-17085?
CVE-2019-17085 has a severity level of medium, with a CVSS score of 6.5.
How can I fix the CVE-2019-17085 vulnerability?
To fix the CVE-2019-17085 vulnerability, it is recommended to update Micro Focus Operations Agent to a version that is not affected (12.12 or later).
- collector/nvd-index
- agent/severity
- agent/references
- agent/author
- agent/weakness
- agent/type
- agent/event
- agent/description
- agent/last-modified-date
- agent/softwarecombine
- agent/first-publish-date
- agent/tags
- collector/mitre-cve
- source/MITRE
- vendor/microfocus
- canonical/microfocus operations agent
- version/microfocus operations agent/12.0
- version/microfocus operations agent/12.01
- version/microfocus operations agent/12.02
- version/microfocus operations agent/12.03
- version/microfocus operations agent/12.04
- version/microfocus operations agent/12.05
- version/microfocus operations agent/12.06
- version/microfocus operations agent/12.10
- version/microfocus operations agent/12.11