{"containers": {"cna": {"affected": [{"product": "Operations Agent", "vendor": "Micro Focus International", "versions": [{"status": "affected", "version": "12.0, 12.01, 12.02, 12.03, 12.04, 12.05, 12.06, 12.10, 12.11"}]}], "descriptions": [{"lang": "en", "value": "XXE attack vulnerability on Micro Focus Operations Agent, affected version 12.0, 12.01, 12.02, 12.03, 12.04, 12.05, 12.06, 12.10, 12.11. The vulnerability could be exploited to do an XXE attack on Operations Agent."}], "problemTypes": [{"descriptions": [{"description": "XXE attack", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2021-01-06T16:15:47", "orgId": "f81092c5-7f14-476d-80dc-24857f90be84", "shortName": "microfocus"}, "references": [{"tags": ["x_refsource_CONFIRM"], "url": "https://softwaresupport.softwaregrp.com/doc/KM03556426"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "security@microfocus.com", "ID": "CVE-2019-17085", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "Operations Agent", "version": {"version_data": [{"version_value": "12.0, 12.01, 12.02, 12.03, 12.04, 12.05, 12.06, 12.10, 12.11"}]}}]}, "vendor_name": "Micro Focus International"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "XXE attack vulnerability on Micro Focus Operations Agent, affected version 12.0, 12.01, 12.02, 12.03, 12.04, 12.05, 12.06, 12.10, 12.11. The vulnerability could be exploited to do an XXE attack on Operations Agent."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "XXE attack"}]}]}, "references": {"reference_data": [{"name": "https://softwaresupport.softwaregrp.com/doc/KM03556426", "refsource": "CONFIRM", "url": "https://softwaresupport.softwaregrp.com/doc/KM03556426"}]}}}}, "cveMetadata": {"assignerOrgId": "f81092c5-7f14-476d-80dc-24857f90be84", "assignerShortName": "microfocus", "cveId": "CVE-2019-17085", "datePublished": "2019-11-18T20:16:28", "dateReserved": "2019-10-02T00:00:00", "dateUpdated": "2021-01-06T16:15:47", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.0"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:microfocus:operations_agent:12.0:*:*:*:*:*:*:*", "matchCriteriaId": "B386C147-D89B-45C2-9C68-545C1102F519", "vulnerable": true}, {"criteria": "cpe:2.3:a:microfocus:operations_agent:12.01:*:*:*:*:*:*:*", "matchCriteriaId": "1A21863B-4079-44B7-9E77-AEF2ACFEE866", "vulnerable": true}, {"criteria": "cpe:2.3:a:microfocus:operations_agent:12.02:*:*:*:*:*:*:*", "matchCriteriaId": "BCB70185-D717-4CCD-96D7-D87DB0B26D23", "vulnerable": true}, {"criteria": "cpe:2.3:a:microfocus:operations_agent:12.03:*:*:*:*:*:*:*", "matchCriteriaId": "BFAEA425-6775-422A-810F-34148C0568D5", "vulnerable": true}, {"criteria": "cpe:2.3:a:microfocus:operations_agent:12.04:*:*:*:*:*:*:*", "matchCriteriaId": "36D8E42D-76B8-44F1-9D5E-1E028856048B", "vulnerable": true}, {"criteria": "cpe:2.3:a:microfocus:operations_agent:12.05:*:*:*:*:*:*:*", "matchCriteriaId": "2CE2D00B-25CF-46C5-9A59-7288D027FF4C", "vulnerable": true}, {"criteria": "cpe:2.3:a:microfocus:operations_agent:12.06:*:*:*:*:*:*:*", "matchCriteriaId": "F4AF06A9-7934-49E4-BA84-4060F069FE12", "vulnerable": true}, {"criteria": "cpe:2.3:a:microfocus:operations_agent:12.10:*:*:*:*:*:*:*", "matchCriteriaId": "71E8620F-E030-4A29-9630-E52FE9F8CBAF", "vulnerable": true}, {"criteria": "cpe:2.3:a:microfocus:operations_agent:12.11:*:*:*:*:*:*:*", "matchCriteriaId": "7DCB40C1-168E-41AE-B346-C3579ECCE8B0", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "XXE attack vulnerability on Micro Focus Operations Agent, affected version 12.0, 12.01, 12.02, 12.03, 12.04, 12.05, 12.06, 12.10, 12.11. The vulnerability could be exploited to do an XXE attack on Operations Agent."}, {"lang": "es", "value": "Una vulnerabilidad de ataque XXE en Micro Focus Operations Agent, versiones afectada 12.0, 12.01, 12.02, 12.03, 12.04, 12.05, 12.06, 12.10, 12.11. La vulnerabilidad podr\u00eda ser explotada para llevar a cabo un ataque de tipo XXE sobre Operations Agent."}], "id": "CVE-2019-17085", "lastModified": "2023-11-07T03:06:09.073", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "SINGLE", "availabilityImpact": "PARTIAL", "baseScore": 4.0, "confidentialityImpact": "NONE", "integrityImpact": "NONE", "vectorString": "AV:N/AC:L/Au:S/C:N/I:N/A:P", "version": "2.0"}, "exploitabilityScore": 8.0, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}], "cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.1"}, "exploitabilityScore": 2.8, "impactScore": 3.6, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2019-11-18T21:15:12.370", "references": [{"source": "security@opentext.com", "url": "https://softwaresupport.softwaregrp.com/doc/KM03556426"}], "sourceIdentifier": "security@opentext.com", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-611"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{}