VULNERABILITY INTELLIGENCE
CVE-2018-6486
CVSS score7.3 HIGH
EPSS probability1.19%
CISA KEVNot currently listed
Published2018-02-02
Last modified2026-06-17
CVSS vectorCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Description
XML External Entity (XXE) vulnerability in Micro Focus Fortify Audit Workbench (AWB) and Micro Focus Fortify Software Security Center (SSC), versions 16.10, 16.20, 17.10. This vulnerability could be exploited to allow a XML External Entity (XXE) injection.
Weakness classification
- CWE-611: Improper Restriction of XML External Entity Reference