Critical

DATE	CVE	VULNERABILITY TITLE	RISK
2018-08-30	CVE-2018-13824	SQL Injection vulnerability in multiple products Insufficient input sanitization of two parameters in CA PPM 14.3 and below, 14.4, 15.1, 15.2 CP5 and below, and 15.3 CP2 and below, allows remote attackers to execute SQL injection attacks. network low complexity ca broadcom CWE-89 critical	9.8
2018-08-30	CVE-2018-13826	XXE vulnerability in multiple products An XML external entity vulnerability in the XOG functionality, in CA PPM 14.3 and below, 14.4, 15.1, 15.2 CP5 and below, and 15.3 CP2 and below, allows remote attackers to conduct server side request forgery attacks. network low complexity ca broadcom CWE-611 critical	9.1