CVE-2018-12463: MFSBGN03811 rev.1 - Fortify Software Security Center (SSC), Multiple vulnerabilities

Security readout for executives and security teams

Fortify Software Security Center versions 17.1, 17.2, and 18.1 have an XML parsing flaw that can let an unauthenticated remote attacker read files or make the server send requests to other systems. This matters most where SSC is reachable from untrusted networks or has access to sensitive internal resources. Exposure is limited to organizations still running affected Fortify SSC versions. Risk increases if SSC endpoints accepting XML are internet-facing, reachable by untrusted users, or able to access sensitive local files or internal network services. Prioritize remediation for any affected SSC instance exposed beyond trusted networks. This is a legacy high-severity vulnerability with public exploit information, so the main business risk is unmaintained security tooling becoming a path to file disclosure or internal network access. Mitigation focus: Identify and retire Fortify SSC 17.1, 17.2, and 18.1 deployments.; Consult Micro Focus advisory KM03201563 for fixed versions and vendor-approved mitigations.; Restrict SSC access to trusted administrative networks only..

Prepared

May 24, 2026, 09:54 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.