CVE coverage
View on NVD →
CVE-2018-12463
CVSS 9.8
8 detections found
An XML external entity (XXE) vulnerability in Fortify Software Security Center (SSC), version 17.1, 17.2, 18.1 allows remote unauthenticated users to read arbitrary files or conduct server-side request forgery (SSRF) attacks via a crafted DTD in an XML request.
Detection rules
| Source | Rule | Status | Updated |
|---|---|---|---|
| suricata | ET WEB_SPECIFIC_APPS Fortify Software Security Center XML External Entity Injection 1 | rev 3 | 2020-09-16 |
| suricata | ET WEB_SPECIFIC_APPS Fortify Software Security Center XML External Entity Injection 2 | rev 3 | 2020-09-16 |
| suricata | ET WEB_SPECIFIC_APPS Fortify Software Security Center XML External Entity Injection 3 | rev 3 | 2020-09-16 |
| suricata | ET WEB_SPECIFIC_APPS Fortify Software Security Center XML External Entity Injection 4 | rev 3 | 2020-09-16 |
| snort | ET WEB_SPECIFIC_APPS Fortify Software Security Center XML External Entity Injection 1 | rev 2 | 2018-07-16 |
| snort | ET WEB_SPECIFIC_APPS Fortify Software Security Center XML External Entity Injection 2 | rev 2 | 2018-07-16 |
| snort | ET WEB_SPECIFIC_APPS Fortify Software Security Center XML External Entity Injection 3 | rev 2 | 2018-07-16 |
| snort | ET WEB_SPECIFIC_APPS Fortify Software Security Center XML External Entity Injection 4 | rev 2 | 2018-07-16 |