Vulnerabilities

TI-2024-04366 CVE-2024-4692 · GHSA-gxhw-gx89-g9ch

Multiple missing permission checks

LOW 10

Improper Validation of Specified Quantity in Input vulnerability in OpenText OpenText Application Automation Tools allows Exploiting Incorrectly Configured Access Control Security Levels.

CVSS 4.0LOW 1.8 Network High privileges User interaction EPSS 0.00289 Published 2024-10-16 No fix listed CWE-280

TI-2024-04365 CVE-2024-4690 · GHSA-vfmw-mcw8-m32f

Insecure usage for DocumentBuilderFactory and TransformerFactory in OpenText Application Automation Tools

LOW 23

Improper Restriction of XML External Entity Reference vulnerability in OpenText Application Automation Tools allows DTD Injection.This issue affects OpenText Application Automation Tools: 24.1.0 and below.

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.00403 Published 2024-10-16 No fix listed CWE-611

TI-2024-03917 CVE-2024-4211 · GHSA-qrr4-q9rq-pfvg

Multiple missing permission checks

LOW 10

Improper Validation of Specified Quantity in Input vulnerability in OpenText OpenText Application Automation Tools allows Exploiting Incorrectly Configured Access Control Security Levels.

CVSS 4.0LOW 1.8 Network High privileges User interaction EPSS 0.00289 Published 2024-10-16 No fix listed CWE-280

TI-2024-03897 CVE-2024-4189 · GHSA-5h3x-3x9g-9c2m

Multiple XXE sinks in Run LoadRunner script step in OpenText Application Automation Tools

LOW 27

Improper Restriction of XML External Entity Reference vulnerability in OpenText Application Automation Tools allows DTD Injection.This issue affects OpenText Application Automation Tools: 24.1.0 and below.

CVSS 4.0MEDIUM 5.9 Network Low privileges User interaction EPSS 0.00474 Published 2024-10-16 No fix listed CWE-611

TI-2024-03892 CVE-2024-4184 · GHSA-8mj2-x5qq-7m6c

Multiple XXE sinks in ALM archive post-build step in OpenText Application Automation Tools

LOW 27

Improper Restriction of XML External Entity Reference vulnerability in OpenText Application Automation Tools allows DTD Injection.This issue affects OpenText Application Automation Tools: 24.1.0 and below.

CVSS 4.0MEDIUM 5.9 Network Low privileges User interaction EPSS 0.00474 Published 2024-10-16 No fix listed CWE-611

TI-2021-05481 CVE-2021-22512 · GHSA-mwg2-3xpv-5v28

Cross-site request forgery in Micro Focus Application Automation Tools Plugin - Jenkins…

LOW 30

Cross-Site Request Forgery (CSRF) vulnerability in Micro Focus Application Automation Tools Plugin - Jenkins plugin.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00745 Published 2021-04-08 Fixed in 6.8 CWE-352

TI-2021-05480 CVE-2021-22511 · GHSA-q296-9j5x-fxf4

Improper certificate validation in Micro Focus Application Automation Tools Plugin…

LOW 29

Improper Certificate Validation vulnerability in Micro Focus Application Automation Tools Plugin - Jenkins plugin.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00404 Published 2021-04-08 Fixed in 6.8 CWE-295

TI-2021-05479 CVE-2021-22510 · GHSA-gc2r-ccfh-62v9

Cross-site scripting in Micro Focus Application Automation Tools Plugin - Jenkins plugin

LOW 35

Reflected XSS vulnerability in Micro Focus Application Automation Tools Plugin - Jenkins plugin.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.05152 Published 2021-04-08 Fixed in 6.8 CWE-79

TI-2021-05482 CVE-2021-22513 · GHSA-7qp2-rgxr-29q4

Missing authorization in Micro Focus Application Automation Tools Plugin - Jenkins plugin.

LOW 31

Missing Authorization vulnerability in Micro Focus Application Automation Tools Plugin - Jenkins plugin.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01226 Published 2021-04-08 Fixed in 7.2.3-beta CWE-862

Vulnerabilities

Filters