CVE-2018-6486 in Fortify Audit Workbench

Summary

XML External Entity (XXE) vulnerability in Micro Focus Fortify Audit Workbench (AWB) and Micro Focus Fortify Software Security Center (SSC), versions 16.10, 16.20, 17.10. This vulnerability could be exploited to allow a XML External Entity (XXE) injection.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

• Responsible: SUSE
• Reservation: 02/01/2018
• Disclosure: 02/02/2018
• Moderation: VulDB entry created
• Entries: VDB-112758 (1)
• CPE: ready
• CWE: CWE-611 (Confirmed)
• CVSS: 8.1
• EPSS: 0.00211
• Activities: Very Low

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2018-6486
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2018-6486
• CVE Details: https://www.cvedetails.com/cve/CVE-2018-6486/