Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2019-17085

XXE attack vulnerability on Micro Focus Operations Agent, affected version 12.0, 12.01, 12.02, 12.03, 12.04, 12.05, 12.06, 12.10, 12.11. The vulnerability could be exploited to do an XXE attack on Operations Agent.

Published

2019-11-18T21:15:12.370

Last Modified

2024-11-21T04:31:39.973

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 6.5 (MEDIUM)

CVSSv2 Vector

AV:N/AC:L/Au:S/C:N/I:N/A:P

  • Access Vector: NETWORK
  • Access Complexity: LOW
  • Authentication: SINGLE
  • Confidentiality Impact: NONE
  • Integrity Impact: NONE
  • Availability Impact: PARTIAL
Exploitability Score

8.0

Impact Score

2.9

Weaknesses
  • Type: Primary
    CWE-611
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application microfocus operations_agent 12.0 Yes
Application microfocus operations_agent 12.01 Yes
Application microfocus operations_agent 12.02 Yes
Application microfocus operations_agent 12.03 Yes
Application microfocus operations_agent 12.04 Yes
Application microfocus operations_agent 12.05 Yes
Application microfocus operations_agent 12.06 Yes
Application microfocus operations_agent 12.10 Yes
Application microfocus operations_agent 12.11 Yes
References