CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

1962 matches found

OSV•added 2024/10/16 5:15 p.m.•7 views

CVE-2024-4189

Improper Restriction of XML External Entity Reference vulnerability in OpenText Application Automation Tools allows DTD Injection.This issue affects OpenText Application Automation Tools: 24.1.0 and below...

8CVSS5.8AI score0.00455EPSS

SaveExploits0References1

OSV•added 2024/10/16 5:15 p.m.•7 views

CVE-2024-4690

8CVSS5.8AI score0.00386EPSS

SaveExploits0References1

NVD•added 2024/10/16 5:15 p.m.•29 views

CVE-2024-4690

8CVSS0.00386EPSS

SaveExploits0References1

OSV•added 2024/10/16 5:15 p.m.•6 views

CVE-2024-4211

Improper Validation of Specified Quantity in Input vulnerability in OpenText OpenText Application Automation Tools allows Exploiting Incorrectly Configured Access Control Security Levels. Multiple missing permission checks - ALM job config has been discovered in OpenText Application Automation...

2.4CVSS5.7AI score0.00277EPSS

SaveExploits0References1

NVD•added 2024/10/16 5:15 p.m.•27 views

CVE-2024-4211

2.4CVSS0.00277EPSS

SaveExploits0References1

NVD•added 2024/10/16 5:15 p.m.•25 views

CVE-2024-4692

Improper Validation of Specified Quantity in Input vulnerability in OpenText OpenText Application Automation Tools allows Exploiting Incorrectly Configured Access Control Security Levels. Multiple missing permission checks - Service Virtualization config has been discovered in in OpenText...

2.4CVSS0.00277EPSS

SaveExploits0References1

NVD•added 2024/10/16 5:15 p.m.•41 views

CVE-2024-4184

8CVSS0.00455EPSS

SaveExploits0References1

NVD•added 2024/10/16 5:15 p.m.•25 views

CVE-2023-32266

Untrusted Search Path vulnerability in OpenText™ Application Lifecycle Management ALM,Quality Center allows Code Inclusion. The vulnerability allows a user to archive a malicious DLLs on the system prior to the installation. This issue affects Application Lifecycle Management ALM,Quality Center:...

5.3CVSS0.00168EPSS

SaveExploits0References1

Cvelist•added 2024/10/16 4:41 p.m.•32 views

CVE-2024-4692 Multiple missing permission checks

Improper Validation of Specified Quantity in Input vulnerability in OpenText OpenText Application Automation Tools allows Exploiting Incorrectly Configured Access Control Security Levels. Multiple missing permission checks - Service Virtualization config has been discovered in in OpenText...

1.8CVSS0.00277EPSS

SaveExploits0References1

Vulnrichment•added 2024/10/16 4:41 p.m.•17 views

CVE-2024-4692 Multiple missing permission checks

Improper Validation of Specified Quantity in Input vulnerability in OpenText OpenText Application Automation Tools allows Exploiting Incorrectly Configured Access Control Security Levels. Multiple missing permission checks - Service Virtualization config has been discovered in in OpenText...

1.8CVSS7.1AI score0.00277EPSS

SaveExploits0References1

CVE•added 2024/10/16 4:41 p.m.•61 views

CVE-2024-4692

CVE-2024-4692 affects OpenText Application Automation Tools (versions 24.1.0 and below). Root cause: improper validation of input quantity and multiple missing permission checks in the Service Virtualization configuration. Impact: could allow users with Overall/Read permission to enumerate Servic...

2.4CVSS4.9AI score0.00277EPSS

SaveExploits0References1Affected Software1

Vulnrichment•added 2024/10/16 4:41 p.m.•12 views

CVE-2024-4690 Insecure usage for DocumentBuilderFactory and TransformerFactory in OpenText Application Automation Tools

5.1CVSS7.2AI score0.00386EPSS

SaveExploits0References1

CVE•added 2024/10/16 4:41 p.m.•60 views

CVE-2024-4690

CVE-2024-4690 affects the OpenText Application Automation Tools Plugin for Jenkins (versions 24.1.0 and earlier). The root cause is improper configuration of XML parsers, enabling XML external entity (XXE) attacks and DTD Injection when processing input files for build steps. Reported impact incl...

8CVSS7.9AI score0.00386EPSS

SaveExploits0References1Affected Software1

Cvelist•added 2024/10/16 4:41 p.m.•36 views

CVE-2024-4690 Insecure usage for DocumentBuilderFactory and TransformerFactory in OpenText Application Automation Tools

5.1CVSS0.00386EPSS

SaveExploits0References1

Vulnrichment•added 2024/10/16 4:41 p.m.•14 views

CVE-2024-4211 Multiple missing permission checks

1.8CVSS7AI score0.00277EPSS

SaveExploits0References1

CVE•added 2024/10/16 4:41 p.m.•65 views

CVE-2024-4211

CVE-2024-4211 affects OpenText Application Automation Tools (v24.1.0 and below). Root cause: improper validation of input quantity coupled with multiple missing permission checks in ALM job configuration. Impact: users with Overall/Read permission could enumerate ALM server names, usernames and c...

2.4CVSS4.8AI score0.00277EPSS

SaveExploits0References1Affected Software1

Cvelist•added 2024/10/16 4:41 p.m.•33 views

CVE-2024-4211 Multiple missing permission checks

1.8CVSS0.00277EPSS

SaveExploits0References1

Vulnrichment•added 2024/10/16 4:41 p.m.•13 views

CVE-2024-4189 Multiple XXE sinks in Run LoadRunner script step in OpenText Application Automation Tools

5.9CVSS7.2AI score0.00455EPSS

SaveExploits0References1

CVE•added 2024/10/16 4:41 p.m.•49 views

CVE-2024-4189

CVE-2024-4189 affects OpenText Application Automation Tools (version 24.1.0 and earlier). The issue is an XML External Entity (XXE) / DTD Injection caused by an improper restriction on external entities in the tool’s XML parsing, leading to potential compromise of confidentiality, integrity, and ...

8CVSS7.9AI score0.00455EPSS

SaveExploits0References1Affected Software1

Cvelist•added 2024/10/16 4:41 p.m.•30 views

CVE-2024-4189 Multiple XXE sinks in Run LoadRunner script step in OpenText Application Automation Tools

5.9CVSS0.00455EPSS

SaveExploits0References1

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by