PT-2021-15107
CVE-2021-22498
·
تاريخ النشر
2021-01-19
·
تاريخ التحديث
2021-01-29
الوصف من
CVSS 3.1
8.1
عاليةالمقاييسAV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
Name of the Vulnerable Software and Affected Versions
Micro Focus Application Lifecycle Management versions 12.x through 15.5
Micro Focus Application Lifecycle Management versions 12.60 Patch 5 and earlier
Micro Focus Application Lifecycle Management versions 15.0.1 Patch 2 and earlier
Description
The issue is related to an XML External Entity Injection, which could be exploited to allow an XML External Entity Injection.
Recommendations
For versions 12.x through 15.5, update to a version later than 15.5.
For versions 12.60 Patch 5 and earlier, apply a patch later than Patch 5.
For versions 15.0.1 Patch 2 and earlier, apply a patch later than Patch 2.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾