CVE-2024-4690CWE-611

Insecure usage for DocumentBuilderFactory and TransformerFactory in OpenText Application Automation Tools

Medium · published October 16, 2024

CVSS v4.0
5.1
EPSS
0%
Percentile
33.4
In the wild
Unconfirmed
What it is

Improper Restriction of XML External Entity Reference vulnerability in OpenText Application Automation Tools allows DTD Injection.This issue affects OpenText Application Automation Tools: 24.1.0 and below.

The record
Technical detail
CVSS v4.0
5.1 · MEDIUM
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/S:N/AU:Y/R:U/V:D/RE:L/U:Green
EPSS
0.00403 · 33.4th percentile
Weakness
CWE-611 · Improper Restriction of XML External Entity Reference
Published
2024-10-16T16:41Z
EPSS history
Timeline
  • 16 OCT 16:41Z
    Insecure usage for DocumentBuilderFactory and TransformerFactory in OpenText Application Automation Tools
    cvelistv5