XXE Attack Vulnerability in Micro Focus Operations Agent
CVE-2019-17085

6.5MEDIUM

Key Information:

Vendor

Micro Focus International

Status
Operations Agent
Vendor
CVE Published:
18 November 2019

What is CVE-2019-17085?

The vulnerability found in Micro Focus Operations Agent permits an XML External Entity (XXE) attack, allowing attackers to exploit the way the application processes XML inputs. This may lead to disclosure of sensitive data or unintended actions on the system. Affected versions include 12.0 through 12.11, and users are advised to patch their systems to mitigate the risks associated with this vulnerability.

Affected Version(s)

Operations Agent 12.0, 12.01, 12.02, 12.03, 12.04, 12.05, 12.06, 12.10, 12.11

References

https://softwaresupport.softwaregrp.com/doc/KM03556426
x_refsource_CONFIRM

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.