description: CA Harvest Software Change Manager versions 13.0.3, 13.0.4, 14.0.0, and 14.0.1, contain a vulnerability in the CSV export functionality, due to insufficient input validation, that can allow a privileged user to potentially execute arbitrary code or commands.
problem types: CWE-1236: Improper Neutralization of Formula Elements in a CSV File
affected:
{
product: CA Harvest Software Change Manager
vendor: n/a
versions:
status: affected, version: 13.0.3, 13.0.4, 14.0.0, 14.0.1
}