CVE-2024-4184 — Multiple XXE sinks in ALM archive post-build step in OpenText Application Automation Tools

CVE-2024-4184

Multiple XXE sinks in ALM archive post-build step in OpenText Application Automation Tools PUBLISHED

Description (CNA)

Improper Restriction of XML External Entity Reference vulnerability in OpenText Application Automation Tools allows DTD Injection.This issue affects OpenText Application Automation Tools: 24.1.0 and below.

Affected (CNA)

Vendor / product	Versions
OpenText / OpenText Application Automation Tools	affected 24.1.0 and below

CWE

CWE-611

References

https://portal.microfocus.com/s/article/KM000033540?language=en_US

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.