CVE-2019-17085 XML external entity in Operations Agent
An XXE vulnerability in Micro Focus Operations Agent allows attackers to read sensitive data or cause denial of service.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2019-17085?
CVE-2019-17085 is a medium-severity vulnerability in Micro Focus International Operations Agent, published on 18 Nov 2019. Any signed-in user can exploit it over the network, with no action from the victim.
Official description
XXE attack vulnerability on Micro Focus Operations Agent, affected version 12.0, 12.01, 12.02, 12.03, 12.04, 12.05, 12.06, 12.10, 12.11. The vulnerability could be exploited to do an XXE attack on Operations Agent.
Weakness: CWE-611
Which versions are affected by CVE-2019-17085?
It affects 1 product.
Products include Microfocus Operations Agent.
How do I fix CVE-2019-17085?
No fix has been published for CVE-2019-17085 yet. Limit exposure of the affected software until one is available.
Is CVE-2019-17085 being exploited?
There is no known exploitation of CVE-2019-17085 in the wild and no public exploit code.
Other vulnerabilities in Micro Focus International Operations Agent
- CVE-2021-22505 Privilege escalation in Operations Agent
- CVE-2024-0622 Local privilege escalation vulnerability could affect OpenText Operations Agent on Non-Windows platforms.
- CVE-2026-2123 Privilege escalation vulnerability in Operations Agent
- CVE-2020-11861 Privilege escalation in Operations Agent
- CVE-2021-38129 Information disclosure in Micro Focus Operations Agent.
Sources
Also known as GHSA-3rx9-vfgx-qhj2.