Vulnerabilities > CVE-2024-4690 - XXE vulnerability in Microfocus Application Automation Tools

047910
CVSS 8.0 - HIGH
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
LOW
Confidentiality impact
HIGH
Integrity impact
HIGH
Availability impact
HIGH
network
low complexity
microfocus
CWE-611
NVD
Published: 2024-10-16
Updated: 2024-10-21

Summary

Improper Restriction of XML External Entity Reference vulnerability in OpenText Application Automation Tools allows DTD Injection.This issue affects OpenText Application Automation Tools: 24.1.0 and below.

Vulnerable Configurations

Part Description Count
Application
Microfocus
17

Common Weakness Enumeration (CWE)

References