critical9.8Public exploit code
CVE-2018-12463
An XML external entity (XXE) vulnerability in Fortify Software Security Center (SSC), version 17.1, 17.2, 18.1 allows remote unauthenticated users to read arbi…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Fortify Software Security Center (SSC) 17.x/18.1 - XML External Entity Injection2018-07-16 · webapps · java · Verified
Impact
An XML external entity (XXE) vulnerability in Fortify Software Security Center (SSC), version 17.1, 17.2, 18.1 allows remote unauthenticated users to read arbitrary files or conduct server-side request forgery (SSRF) attacks via a crafted DTD in an XML request.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Hp | Fortify Software Security Center | Versions 17.1, 17.2, 18.1 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.securitytracker.com/id/1041286
- https://softwaresupport.softwaregrp.com/document/-/facetsearch/document/KM03201563
- https://www.exploit-db.com/exploits/45027/
- http://www.securitytracker.com/id/1041286
- https://softwaresupport.softwaregrp.com/document/-/facetsearch/document/KM03201563
- https://www.exploit-db.com/exploits/45027/