CVE-2019-17085

XXE attack vulnerability on Micro Focus Operations Agent, affected version 12.0, 12.01, 12.02, 12.03, 12.04, 12.05, 12.06, 12.10, 12.11. The vulnerability could be exploited to do an XXE attack on Operations Agent.

Published: Nov 18, 2019
Updated: Apr 13, 2023
CVE: CVE-2019-17085
Severity: Medium
Exploit:

CVSS v3:

Severity: Medium
Score: 6.5
AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CVSS v2:

Severity: Low
Score: 4
AV:N/AC:L/Au:S/C:N/I:N/A:P

CWEs:

CWE-611

OWASP TOP 10:

A4 - XML External Entities (XXE)

Affected Software
References

Software	From	Fixed in
microfocus / operations_agent	12.01	12.01.x
microfocus / operations_agent	12.02	12.02.x
microfocus / operations_agent	12.03	12.03.x
microfocus / operations_agent	12.04	12.04.x
microfocus / operations_agent	12.05	12.05.x
microfocus / operations_agent	12.06	12.06.x
microfocus / operations_agent	12.10	12.10.x
microfocus / operations_agent	12.11	12.11.x
microfocus / operations_agent	12.0	12.0.x

https://softwaresupport.softwaregrp.com/doc/KM03556426

Vulnerability Database

290,020

CVE-2019-17085