Vulnerability Description
An XML external entity vulnerability in the XOG functionality, in CA PPM 14.3 and below, 14.4, 15.1, 15.2 CP5 and below, and 15.3 CP2 and below, allows remote attackers to conduct server side request forgery attacks.
CVSS Score
CRITICAL
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Broadcom | Project Portfolio Management | <= 14.3 |
| Ca | Project Portfolio Management | 15.2 |
Related Weaknesses (CWE)
References
- http://www.securityfocus.com/bid/105297Third Party AdvisoryVDB Entry
- https://support.ca.com/us/product-content/recommended-reading/security-notices/cPatchVendor Advisory
- http://www.securityfocus.com/bid/105297Third Party AdvisoryVDB Entry
- https://support.ca.com/us/product-content/recommended-reading/security-notices/cPatchVendor Advisory
FAQ
What is CVE-2018-13826?
CVE-2018-13826 is a vulnerability with a CVSS score of 9.1 (CRITICAL). An XML external entity vulnerability in the XOG functionality, in CA PPM 14.3 and below, 14.4, 15.1, 15.2 CP5 and below, and 15.3 CP2 and below, allows remote attackers to conduct server side request ...
How severe is CVE-2018-13826?
CVE-2018-13826 has been rated CRITICAL with a CVSS base score of 9.1/10. This is considered a critical vulnerability requiring immediate attention.
Is there a patch for CVE-2018-13826?
Check the references section above for vendor advisories and patch information. Affected products include: Broadcom Project Portfolio Management, Ca Project Portfolio Management.