CVE-2021-22501

State: Published
Severity: 5.3 Medium
Published: Dec 19, 2024
Updated: Dec 20, 2024
Reserved: Jan 5, 2021

Description

Improper Restriction of XML External Entity Reference vulnerability in OpenText™ Operations Bridge Manager allows Input Data Manipulation.

The vulnerability could be exploited to confidential information

This issue affects Operations Bridge Manager: 2017.05, 2017.11, 2018.05, 2018.11, 2019.05, 2019.11, 2020.05, 2020.10.

Scores

CVSS	Score	Vector	Source
4.0	5.3 Medium	CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/S:N/AU:Y/R:A/V:C/RE:M/U:Amber	OpenText

Weaknesses

CWE-611 Improper Restriction of XML External Entity Reference

Affected Products

Product	Versions
Operations Bridge ManagerOpenText™	2017.05Affected 2017.11Affected 2018.05Affected 2018.11Affected 2019.05Affected 2019.11Affected 2020.05Affected 2020.10Affected

References

https://portal.microfocus.com/s/article/KM000037407?language=en_US

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.