CVE-2019-18943 MEDIUM

CVE-2019-18943: XML External Entity processing

Vendor Micro Focus

Product Solutions Business Manager

Weakness CWE-611 · XXE

Published February 26, 2021

Last update September 16, 2024

CVSS base score

6.1/10

Attack vector Adjacent

Attack complexity Low

Privileges required Low

User interaction Required

Confidentiality High

Integrity None

CVSS vector

CVSS:3.1/AV:A/AC:L/PR:L/UI:R/S:C/C:H/I:N/A:N

What the vulnerability does

01Description

Micro Focus Solutions Business Manager versions prior to 11.7.1 are vulnerable to XML External Entity Processing (XXE) on certain operations.

Key dates

February 26, 2021 CVE published

September 16, 2024 Record updated

External resources

Related vulnerabilities