CVE-2018-12463

MFSBGN03811 rev.1 - Fortify Software Security Center (SSC), Multiple vulnerabilities

State: Published
Severity: 7.3 High
Published: Jul 12, 2018
Updated: Sep 16, 2024
Reserved: Jun 15, 2018

Description

An XML external entity (XXE) vulnerability in Fortify Software Security Center (SSC), version 17.1, 17.2, 18.1 allows remote unauthenticated users to read arbitrary files or conduct server-side request forgery (SSRF) attacks via a crafted DTD in an XML request.

Scores

CVSS	Score	Vector	Source
3.0	7.3 High	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L	microfocus

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
Fortify Software Security CenterMicro Focus	17.1, 17.2, 18.1Affected

References

1041286vdb-entry
https://softwaresupport.softwaregrp.com/document/-/facetsearch/document/KM03201563
45027exploit

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.