CVE-2021-22504 — Operations Bridge Manager vulnerability

3 documents3 sources
Severity
9.8CRITICALNVD
EPSS
3.0%
top 13.38%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Microfocus Operations Bridge Manager
Timeline
PublishedFeb 12
Latest updateMay 24

Description

Arbitrary code execution vulnerability on Micro Focus Operations Bridge Manager product, affecting versions 10.1x, 10.6x, 2018.05, 2018.11, 2019.05, 2019.11, 2020.05, 2020.10. The vulnerability could allow remote attackers to execute arbitrary code on an OBM server.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HExploitability: 3.9 | Impact: 5.9

Affected Packages1 packages

🔴Vulnerability Details

2
GHSA
GHSA-r8mr-9747-24q8: Arbitrary code execution vulnerability on Micro Focus Operations Bridge Manager product, affecting versions 10↗2022-05-24
▶
CVEList
CVE-2021-22504: Arbitrary code execution vulnerability on Micro Focus Operations Bridge Manager product, affecting versions 10↗2021-02-12
▶
CVE-2021-22504 — CRITICAL severity | cvebase