CVE-2023-24466 - Vulnerability Details

Vendors	Products
Microfocus	Imanager
Opentext	Imanager

Link	Providers
https://www.netiq.com/documentation/imanager-32/pdfdoc/imanager326_patch3_releasenotes/imanager326_patch3_releasenotes.pdf

Type	Values Removed	Values Added
First Time appeared		Microfocus Microfocus imanager
CPEs		cpe:2.3:a:microfocus:imanager:::::::: cpe:2.3:a:microfocus:imanager:3.2.6:-:::::: cpe:2.3:a:microfocus:imanager:3.2.6:patch1:::::: cpe:2.3:a:microfocus:imanager:3.2.6:patch2::::::
Vendors & Products		Microfocus Microfocus imanager

Type	Values Removed	Values Added
First Time appeared		Opentext Opentext imanager
CPEs		cpe:2.3:a:opentext:imanager::::::::
Vendors & Products		Opentext Opentext imanager
Metrics		ssvc `{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

Type	Values Removed	Values Added
Description		Possible XML External Entity Injection in iManager GET parameter has been discovered in OpenText™ iManager 3.2.6.0200.
Title		Possible XML External Entity Injection in OpenText iManager
Weaknesses		CWE-611
References		https://www.netiq.com/documentation/imanager-32/pdfdoc/imanager326_patch3_releasenotes/imanager326_patch3_releasenotes.pdf
Metrics		cvssV3_1 `{'score': 7.5, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N'}`

Show plain JSON

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2023-24466", "assignerOrgId": "f81092c5-7f14-476d-80dc-24857f90be84", "state": "PUBLISHED", "assignerShortName": "OpenText", "dateReserved": "2023-01-23T21:31:58.769Z", "datePublished": "2024-11-22T15:34:31.683Z", "dateUpdated": "2024-11-25T18:12:11.291Z"}, "containers": {"cna": {"affected": [{"defaultStatus": "affected", "platforms": ["Windows", "Linux", "64 bit"], "product": "iManager", "vendor": "OpenText", "versions": [{"lessThanOrEqual": "3.2.6.0200", "status": "affected", "version": "3.0.0", "versionType": "rpm, exe"}]}], "descriptions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "<strong>Possible XML External Entity Injection\n\n\n in iManager GET parameter </strong><strong>has been discovered in\nOpenText\u2122 </strong><strong>iManager 3.2.6.0200</strong><strong>.<br></strong>"}], "value": "Possible XML External Entity Injection\n\n\n in iManager GET parameter has been discovered in\nOpenText\u2122 iManager 3.2.6.0200."}], "impacts": [{"capecId": "CAPEC-221", "descriptions": [{"lang": "en", "value": "CAPEC-221 Data Serialization External Entities Blowup"}]}], "metrics": [{"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "version": "3.1"}, "format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "problemTypes": [{"descriptions": [{"cweId": "CWE-611", "description": "CWE-611 Improper Restriction of XML External Entity Reference", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"orgId": "f81092c5-7f14-476d-80dc-24857f90be84", "shortName": "OpenText", "dateUpdated": "2024-11-22T15:34:31.683Z"}, "references": [{"url": "https://www.netiq.com/documentation/imanager-32/pdfdoc/imanager326_patch3_releasenotes/imanager326_patch3_releasenotes.pdf"}], "source": {"discovery": "UNKNOWN"}, "title": "Possible XML External Entity Injection in OpenText iManager", "x_generator": {"engine": "Vulnogram 0.1.0-dev"}}, "adp": [{"affected": [{"vendor": "opentext", "product": "imanager", "cpes": ["cpe:2.3:a:opentext:imanager:*:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "3.0.0", "status": "affected", "lessThanOrEqual": "3.2.6.0200", "versionType": "rpm"}]}], "metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2024-11-25T18:09:43.291349Z", "id": "CVE-2023-24466", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-11-25T18:12:11.291Z"}}]}}

{

dataType : CVE_RECORD (string)

dataVersion : 5.1 (string)

cveMetadata : { »

cveId : CVE-2023-24466 (string)

assignerOrgId : f81092c5-7f14-476d-80dc-24857f90be84 (string)

state : PUBLISHED (string)

assignerShortName : OpenText (string)

dateReserved : 2023-01-23T21:31:58.769Z (string)

datePublished : 2024-11-22T15:34:31.683Z (string)

dateUpdated : 2024-11-25T18:12:11.291Z (string)

}

containers : { »

cna : { »

affected : [ »

0 : { »

defaultStatus : affected (string)

platforms : [ »

0 : Windows (string)

1 : Linux (string)

2 : 64 bit (string)

]

product : iManager (string)

vendor : OpenText (string)

versions : [ »

0 : { »

lessThanOrEqual : 3.2.6.0200 (string)

status : affected (string)

version : 3.0.0 (string)

versionType : rpm, exe (string)

}

]

}

]

descriptions : [ »

0 : { »

lang : en (string)

supportingMedia : [ »

0 : { »

base64 : false (boolean)

type : text/html (string)

value : Possible XML External Entity Injection in iManager GET parameter has been discovered in OpenText™ iManager 3.2.6.0200. (string)

}

]

value : Possible XML External Entity Injection in iManager GET parameter has been discovered in OpenText™ iManager 3.2.6.0200. (string)

}

]

impacts : [ »

0 : { »

capecId : CAPEC-221 (string)

descriptions : [ »

0 : { »

lang : en (string)

value : CAPEC-221 Data Serialization External Entities Blowup (string)

}

]

}

]

metrics : [ »

0 : { »

cvssV3_1 : { »

attackComplexity : LOW (string)

attackVector : NETWORK (string)

availabilityImpact : NONE (string)

baseScore : 7.5 (number)

baseSeverity : HIGH (string)

confidentialityImpact : HIGH (string)

integrityImpact : NONE (string)

privilegesRequired : NONE (string)

scope : UNCHANGED (string)

userInteraction : NONE (string)

vectorString : CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N (string)

version : 3.1 (string)

}

format : CVSS (string)

scenarios : [ »

0 : { »

lang : en (string)

value : GENERAL (string)

}

]

}

]

problemTypes : [ »

0 : { »

descriptions : [ »

0 : { »

cweId : CWE-611 (string)

description : CWE-611 Improper Restriction of XML External Entity Reference (string)

lang : en (string)

type : CWE (string)

}

]

}

]

providerMetadata : { »

orgId : f81092c5-7f14-476d-80dc-24857f90be84 (string)

shortName : OpenText (string)

dateUpdated : 2024-11-22T15:34:31.683Z (string)

}

references : [ »

0 : { »

url : https://www.netiq.com/documentation/imanager-32/pdfdoc/imanager326_patch3_releasenotes/imanager326_patch3_releasenotes.pdf (string)

}

]

source : { »

discovery : UNKNOWN (string)

}

title : Possible XML External Entity Injection in OpenText iManager (string)

x_generator : { »

engine : Vulnogram 0.1.0-dev (string)

}

adp : [ »

0 : { »

affected : [ »

0 : { »

vendor : opentext (string)

product : imanager (string)

cpes : [ »

0 : cpe:2.3:a:opentext:imanager:*:*:*:*:*:*:*:* (string)

]

defaultStatus : unknown (string)

versions : [ »

0 : { »

version : 3.0.0 (string)

status : affected (string)

lessThanOrEqual : 3.2.6.0200 (string)

versionType : rpm (string)

}

]

}

]

metrics : [ »

0 : { »

other : { »

type : ssvc (string)

content : { »

timestamp : 2024-11-25T18:09:43.291349Z (string)

id : CVE-2023-24466 (string)

options : [ »

0 : { »

Exploitation : none (string)

}

1 : { »

Automatable : yes (string)

}

2 : { »

Technical Impact : partial (string)

}

]

role : CISA Coordinator (string)

version : 2.0.3 (string)

}

]

title : CISA ADP Vulnrichment (string)

providerMetadata : { »

orgId : 134c704f-9b21-4f2e-91b3-4a467353bcc0 (string)

shortName : CISA-ADP (string)

dateUpdated : 2024-11-25T18:12:11.291Z (string)

}

]

}

Show plain JSON

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2023-24466", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2024-11-25T18:09:43.291349Z"}}}], "affected": [{"cpes": ["cpe:2.3:a:opentext:imanager:*:*:*:*:*:*:*:*"], "vendor": "opentext", "product": "imanager", "versions": [{"status": "affected", "version": "3.0.0", "versionType": "rpm", "lessThanOrEqual": "3.2.6.0200"}], "defaultStatus": "unknown"}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-11-25T18:12:04.393Z"}}], "cna": {"title": "Possible XML External Entity Injection in OpenText iManager", "source": {"discovery": "UNKNOWN"}, "impacts": [{"capecId": "CAPEC-221", "descriptions": [{"lang": "en", "value": "CAPEC-221 Data Serialization External Entities Blowup"}]}], "metrics": [{"format": "CVSS", "cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"vendor": "OpenText", "product": "iManager", "versions": [{"status": "affected", "version": "3.0.0", "versionType": "rpm, exe", "lessThanOrEqual": "3.2.6.0200"}], "platforms": ["Windows", "Linux", "64 bit"], "defaultStatus": "affected"}], "references": [{"url": "https://www.netiq.com/documentation/imanager-32/pdfdoc/imanager326_patch3_releasenotes/imanager326_patch3_releasenotes.pdf"}], "x_generator": {"engine": "Vulnogram 0.1.0-dev"}, "descriptions": [{"lang": "en", "value": "Possible XML External Entity Injection\n\n\n in iManager GET parameter has been discovered in\nOpenText\u2122 iManager 3.2.6.0200.", "supportingMedia": [{"type": "text/html", "value": "<strong>Possible XML External Entity Injection\n\n\n in iManager GET parameter </strong><strong>has been discovered in\nOpenText\u2122 </strong><strong>iManager 3.2.6.0200</strong><strong>.<br></strong>", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-611", "description": "CWE-611 Improper Restriction of XML External Entity Reference"}]}], "providerMetadata": {"orgId": "f81092c5-7f14-476d-80dc-24857f90be84", "shortName": "OpenText", "dateUpdated": "2024-11-22T15:34:31.683Z"}}}, "cveMetadata": {"cveId": "CVE-2023-24466", "state": "PUBLISHED", "dateUpdated": "2024-11-25T18:12:11.291Z", "dateReserved": "2023-01-23T21:31:58.769Z", "assignerOrgId": "f81092c5-7f14-476d-80dc-24857f90be84", "datePublished": "2024-11-22T15:34:31.683Z", "assignerShortName": "OpenText"}, "dataVersion": "5.1"}

{

dataType : CVE_RECORD (string)

containers : { »

adp : [ »

0 : { »

title : CISA ADP Vulnrichment (string)

metrics : [ »

0 : { »

other : { »

type : ssvc (string)

content : { »

id : CVE-2023-24466 (string)

role : CISA Coordinator (string)

options : [ »

0 : { »

Exploitation : none (string)

}

1 : { »

Automatable : yes (string)

}

2 : { »

Technical Impact : partial (string)

}

]

version : 2.0.3 (string)

timestamp : 2024-11-25T18:09:43.291349Z (string)

}

]

affected : [ »

0 : { »

cpes : [ »

0 : cpe:2.3:a:opentext:imanager:*:*:*:*:*:*:*:* (string)

]

vendor : opentext (string)

product : imanager (string)

versions : [ »

0 : { »

status : affected (string)

version : 3.0.0 (string)

versionType : rpm (string)

lessThanOrEqual : 3.2.6.0200 (string)

}

]

defaultStatus : unknown (string)

}

]

providerMetadata : { »

orgId : 134c704f-9b21-4f2e-91b3-4a467353bcc0 (string)

shortName : CISA-ADP (string)

dateUpdated : 2024-11-25T18:12:04.393Z (string)

}

]

cna : { »

title : Possible XML External Entity Injection in OpenText iManager (string)

source : { »

discovery : UNKNOWN (string)

}

impacts : [ »

0 : { »

capecId : CAPEC-221 (string)

descriptions : [ »

0 : { »

lang : en (string)

value : CAPEC-221 Data Serialization External Entities Blowup (string)

}

]

}

]

metrics : [ »

0 : { »

format : CVSS (string)

cvssV3_1 : { »

scope : UNCHANGED (string)

version : 3.1 (string)

baseScore : 7.5 (number)

attackVector : NETWORK (string)

baseSeverity : HIGH (string)

vectorString : CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N (string)

integrityImpact : NONE (string)

userInteraction : NONE (string)

attackComplexity : LOW (string)

availabilityImpact : NONE (string)

privilegesRequired : NONE (string)

confidentialityImpact : HIGH (string)

}

scenarios : [ »

0 : { »

lang : en (string)

value : GENERAL (string)

}

]

}

]

affected : [ »

0 : { »

vendor : OpenText (string)

product : iManager (string)

versions : [ »

0 : { »

status : affected (string)

version : 3.0.0 (string)

versionType : rpm, exe (string)

lessThanOrEqual : 3.2.6.0200 (string)

}

]

platforms : [ »

0 : Windows (string)

1 : Linux (string)

2 : 64 bit (string)

]

defaultStatus : affected (string)

}

]

references : [ »

0 : { »

url : https://www.netiq.com/documentation/imanager-32/pdfdoc/imanager326_patch3_releasenotes/imanager326_patch3_releasenotes.pdf (string)

}

]

x_generator : { »

engine : Vulnogram 0.1.0-dev (string)

}

descriptions : [ »

0 : { »

lang : en (string)

value : Possible XML External Entity Injection in iManager GET parameter has been discovered in OpenText™ iManager 3.2.6.0200. (string)

supportingMedia : [ »

0 : { »

type : text/html (string)

value : Possible XML External Entity Injection in iManager GET parameter has been discovered in OpenText™ iManager 3.2.6.0200. (string)

base64 : false (boolean)

}

]

}

]

problemTypes : [ »

0 : { »

descriptions : [ »

0 : { »

lang : en (string)

type : CWE (string)

cweId : CWE-611 (string)

description : CWE-611 Improper Restriction of XML External Entity Reference (string)

}

]

}

]

providerMetadata : { »

orgId : f81092c5-7f14-476d-80dc-24857f90be84 (string)

shortName : OpenText (string)

dateUpdated : 2024-11-22T15:34:31.683Z (string)

}

cveMetadata : { »

cveId : CVE-2023-24466 (string)

state : PUBLISHED (string)

dateUpdated : 2024-11-25T18:12:11.291Z (string)

dateReserved : 2023-01-23T21:31:58.769Z (string)

assignerOrgId : f81092c5-7f14-476d-80dc-24857f90be84 (string)

datePublished : 2024-11-22T15:34:31.683Z (string)

assignerShortName : OpenText (string)

}

dataVersion : 5.1 (string)

}

Show plain JSON

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:microfocus:imanager:*:*:*:*:*:*:*:*", "matchCriteriaId": "E63B08F5-5805-41CE-BE93-63BFE4F9F4DD", "versionEndExcluding": "3.2.6", "versionStartIncluding": "3.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:microfocus:imanager:3.2.6:-:*:*:*:*:*:*", "matchCriteriaId": "9EF246DD-DC88-4C64-903E-79CDC733927A", "vulnerable": true}, {"criteria": "cpe:2.3:a:microfocus:imanager:3.2.6:patch1:*:*:*:*:*:*", "matchCriteriaId": "96EDF0C7-9951-4ACD-A1C5-812867CA1294", "vulnerable": true}, {"criteria": "cpe:2.3:a:microfocus:imanager:3.2.6:patch2:*:*:*:*:*:*", "matchCriteriaId": "E676C79A-4C37-47DF-A4AF-722AF6AC30A4", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Possible XML External Entity Injection\n\n\n in iManager GET parameter has been discovered in\nOpenText\u2122 iManager 3.2.6.0200."}, {"lang": "es", "value": "Se ha descubierto una posible inyecci\u00f3n de entidad externa XML en el par\u00e1metro GET de iManager en OpenText\u2122 iManager 3.2.6.0200."}], "id": "CVE-2023-24466", "lastModified": "2025-04-10T20:36:16.743", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 3.6, "source": "security@opentext.com", "type": "Secondary"}, {"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.8, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 5.9, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2024-11-22T16:15:19.673", "references": [{"source": "security@opentext.com", "tags": ["Release Notes"], "url": "https://www.netiq.com/documentation/imanager-32/pdfdoc/imanager326_patch3_releasenotes/imanager326_patch3_releasenotes.pdf"}], "sourceIdentifier": "security@opentext.com", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-611"}], "source": "security@opentext.com", "type": "Secondary"}, {"description": [{"lang": "en", "value": "CWE-611"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{

configurations : [ »

0 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:a:microfocus:imanager:*:*:*:*:*:*:*:* (string)

matchCriteriaId : E63B08F5-5805-41CE-BE93-63BFE4F9F4DD (string)

versionEndExcluding : 3.2.6 (string)

versionStartIncluding : 3.0 (string)

vulnerable : true (boolean)

}

1 : { »

criteria : cpe:2.3:a:microfocus:imanager:3.2.6:-:*:*:*:*:*:* (string)

matchCriteriaId : 9EF246DD-DC88-4C64-903E-79CDC733927A (string)

vulnerable : true (boolean)

}

2 : { »

criteria : cpe:2.3:a:microfocus:imanager:3.2.6:patch1:*:*:*:*:*:* (string)

matchCriteriaId : 96EDF0C7-9951-4ACD-A1C5-812867CA1294 (string)

vulnerable : true (boolean)

}

3 : { »

criteria : cpe:2.3:a:microfocus:imanager:3.2.6:patch2:*:*:*:*:*:* (string)

matchCriteriaId : E676C79A-4C37-47DF-A4AF-722AF6AC30A4 (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

}

]

cveTags : [ *empty* ]

descriptions : [ »

0 : { »

lang : en (string)

value : Possible XML External Entity Injection in iManager GET parameter has been discovered in OpenText™ iManager 3.2.6.0200. (string)

}

1 : { »

lang : es (string)

value : Se ha descubierto una posible inyección de entidad externa XML en el parámetro GET de iManager en OpenText™ iManager 3.2.6.0200. (string)

}

]

id : CVE-2023-24466 (string)

lastModified : 2025-04-10T20:36:16.743 (string)

metrics : { »

cvssMetricV31 : [ »

0 : { »

cvssData : { »

attackComplexity : LOW (string)

attackVector : NETWORK (string)

availabilityImpact : NONE (string)

baseScore : 7.5 (number)

baseSeverity : HIGH (string)

confidentialityImpact : HIGH (string)

integrityImpact : NONE (string)

privilegesRequired : NONE (string)

scope : UNCHANGED (string)

userInteraction : NONE (string)

vectorString : CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N (string)

version : 3.1 (string)

}

exploitabilityScore : 3.9 (number)

impactScore : 3.6 (number)

source : security@opentext.com (string)

type : Secondary (string)

}

1 : { »

cvssData : { »

attackComplexity : LOW (string)

attackVector : NETWORK (string)

availabilityImpact : HIGH (string)

baseScore : 9.8 (number)

baseSeverity : CRITICAL (string)

confidentialityImpact : HIGH (string)

integrityImpact : HIGH (string)

privilegesRequired : NONE (string)

scope : UNCHANGED (string)

userInteraction : NONE (string)

vectorString : CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H (string)

version : 3.1 (string)

}

exploitabilityScore : 3.9 (number)

impactScore : 5.9 (number)

source : nvd@nist.gov (string)

type : Primary (string)

}

]

}

published : 2024-11-22T16:15:19.673 (string)

references : [ »

0 : { »

source : security@opentext.com (string)

tags : [ »

0 : Release Notes (string)

]

url : https://www.netiq.com/documentation/imanager-32/pdfdoc/imanager326_patch3_releasenotes/imanager326_patch3_releasenotes.pdf (string)

}

]

sourceIdentifier : security@opentext.com (string)

vulnStatus : Analyzed (string)

weaknesses : [ »

0 : { »

description : [ »

0 : { »

lang : en (string)

value : CWE-611 (string)

}

]

source : security@opentext.com (string)

type : Secondary (string)

}

1 : { »

description : [ »

0 : { »

lang : en (string)

value : CWE-611 (string)

}

]

source : nvd@nist.gov (string)

type : Primary (string)

}

]

}

Metrics

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact High

Integrity Impact None

Availability Impact None

User Interaction None

Exploitation none

Automatable yes

Technical Impact partial

Affected Vendors & Products

Metrics

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact High

Integrity Impact None

Availability Impact None

User Interaction None

Exploitation none

Automatable yes

Technical Impact partial

Affected Vendors & Products

JSON object

JSON object

JSON object

JSON object