Application Automation Tools vulnerabilities | LiveThreat CVE Feed

Product

Application Automation Tools

by Microfocus · last CVE Oct 16, 2024

CVEs

On KEV

8.0

Max CVSS

New 30D

Vulnerabilities9 In the news0 Timeline

Severity mix

Critical 0High 3Medium 4Low 2

Severity

All severities9 Critical0 High3 Medium4 Low2

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add Application Automation Tools to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2024-4690	8.0	0%	Oct 16	Improper Restriction of XML External Entity Reference vulnerability in OpenText Application Automation Tools allows DTD Injection.This issue affects OpenText Application… Affected: through 24.1.0
CVE-2024-4189	8.0	0%	Oct 16	Improper Restriction of XML External Entity Reference vulnerability in OpenText Application Automation Tools allows DTD Injection.This issue affects OpenText Application… Affected: through 24.1.0
CVE-2024-4184	8.0	0%	Oct 16	Improper Restriction of XML External Entity Reference vulnerability in OpenText Application Automation Tools allows DTD Injection.This issue affects OpenText Application… Affected: through 24.1.0
CVE-2021-22513	6.5	1%	Apr 8	Missing Authorization vulnerability in Micro Focus Application Automation Tools Plugin - Jenkins plugin Affected: through 6.7
CVE-2021-22512	6.5	1%	Apr 8	Cross-Site Request Forgery (CSRF) vulnerability in Micro Focus Application Automation Tools Plugin - Jenkins plugin Affected: through 6.7
CVE-2021-22511	6.5	0%	Apr 8	Improper Certificate Validation vulnerability in Micro Focus Application Automation Tools Plugin - Jenkins plugin Affected: through 6.7
CVE-2021-22510	6.1	5%	Apr 8	Reflected XSS vulnerability in Micro Focus Application Automation Tools Plugin - Jenkins plugin Affected: through 6.7
CVE-2024-4692	2.4	0%	Oct 16	Improper Validation of Specified Quantity in Input vulnerability in OpenText OpenText Application Automation Tools allows Exploiting Incorrectly Configured Access Control Security… Affected: before 24.1.0
CVE-2024-4211	2.4	0%	Oct 16	Improper Validation of Specified Quantity in Input vulnerability in OpenText OpenText Application Automation Tools allows Exploiting Incorrectly Configured Access Control Security… Affected: through 24.1.0