High severity8.0NVD Advisory· Published Oct 16, 2024· Updated Jun 17, 2026
CVE-2024-4690
CVE-2024-4690
Description
Improper Restriction of XML External Entity Reference vulnerability in OpenText Application Automation Tools allows DTD Injection.This issue affects OpenText Application Automation Tools: 24.1.0 and below.
Affected products
4cpe:2.3:a:microfocus:application_automation_tools:*:*:*:*:*:jenkins:*:*+ 1 more
- cpe:2.3:a:microfocus:application_automation_tools:*:*:*:*:*:jenkins:*:*range: <=24.1.0
- (no CPE)range: <=24.1.0
<=24.1.0+ 1 more
- (no CPE)range: <=24.1.0
- (no CPE)range: 24.1.0 and below
Patches
Vulnerability mechanics
References
1- portal.microfocus.com/s/article/KM000033548nvdVendor Advisory
News mentions
1- Jenkins Security Advisory 2024-05-24Jenkins Security Advisories · May 24, 2024