CVE:CVE-2018-6486
CNNVD:CNNVD-201802-055
Micro Focus Fortify Audit Workbench（AWB）和Micro Focus Fortify Software Security Center（SSC）都是英国Micro Focus公司的产品。Micro Focus Fortify Audit Workbench（AWB）是一套软件安全审计平台。Micro Focus Fortify Software Security Center（SSC）是一套软件安全管理平台。
Micro Focus Fortify AWB和Micro Focus Fortify SSC中存在XML外部实体注入漏洞。攻击者可利用该漏洞获取敏感信息的访问权限或造成拒绝服务。以下产品和版本受到影响：Micro Focus Fortify Audit Workbench 16.10版本，16.20版本，17.10版本；Micro Focus Fortify Software Security Center 16.10版本，16.20版本，17.10版本。
solution:Upgrade microfocus fortify_audit_workbench to a higher version than 16.10,16.20,17.10,and avoid the version 16.10,16.20,17.10; Upgrade microfocus fortify_software_security_center to a higher version than 16.10,16.20,17.10,and avoid the version 16.10,16.20,17.10