CVE-2024-4189CWE-611

Multiple XXE sinks in Run LoadRunner script step in OpenText Application Automation Tools

Medium · published October 16, 2024

CVSS v4.0
5.9
EPSS
0%
Percentile
40.0
In the wild
Unconfirmed
What it is

Improper Restriction of XML External Entity Reference vulnerability in OpenText Application Automation Tools allows DTD Injection.This issue affects OpenText Application Automation Tools: 24.1.0 and below.

The record
Technical detail
CVSS v4.0
5.9 · MEDIUM
Vector
CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:P/VC:L/VI:H/VA:N/SC:N/SI:N/SA:N/S:N/AU:N/R:A/V:D/RE:L/U:Green
EPSS
0.00474 · 40.0th percentile
Weakness
CWE-611 · Improper Restriction of XML External Entity Reference
Published
2024-10-16T16:41Z
EPSS history
Timeline
  • 16 OCT 16:41Z
    Multiple XXE sinks in Run LoadRunner script step in OpenText Application Automation Tools
    cvelistv5