CVEvulnerability

CVE-2020-11853

8.8 HIGH Published 2020-10-22 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2020-10-22
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
8.8 HIGH — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS 3.1 ([email protected])
8.8 HIGH — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
6.5 MEDIUM — AV:N/AC:L/Au:S/C:P/I:P/A:P

Description

Arbitrary code execution vulnerability affecting multiple Micro Focus products. 1.) Operation Bridge Manager affecting version: 2020.05, 2019.11, 2019.05, 2018.11, 2018.05, versions 10.6x and 10.1x and older versions. 2.) Application Performance Management affecting versions : 9.51, 9.50 and 9.40 with uCMDB 10.33 CUP 3 3.) Data Center Automation affected version 2019.11 4.) Operations Bridge (containerized) affecting versions: 2019.11, 2019.08, 2019.05, 2018.11, 2018.08, 2018.05, 2018.02, 2017.11 5.) Universal CMDB affecting version: 2020.05, 2019.11, 2019.05, 2019.02, 2018.11, 2018.08, 2018.05, 11, 10.33, 10.32, 10.31, 10.30 6.) Hybrid Cloud Management affecting version 2020.05 7.) Service Management Automation affecting version 2020.5 and 2020.02. The vulnerability could allow to execute arbitrary code.

Affected configurations

• microfocus operation bridge manager (<= 10.10) • microfocus operation bridge manager 10.11 • microfocus operation bridge manager 10.12 • microfocus operation bridge manager 10.60 • microfocus operation bridge manager 10.61 • microfocus operation bridge manager 10.62 • microfocus operation bridge manager 10.63 • microfocus operations bridge manager 2017.11 • microfocus operations bridge manager 2018.02 • microfocus operations bridge manager 2018.05 • microfocus operations bridge manager 2018.08 • microfocus operations bridge manager 2018.11 • microfocus operations bridge manager 2019.05 • microfocus operations bridge manager 2019.08 • microfocus operations bridge manager 2019.11 • microfocus operations bridge manager 2020.05 • hp universal cmbd foundation 10.20 • hp universal cmbd foundation 10.30 • hp universal cmbd foundation 10.31 • hp universal cmbd foundation 10.32 • hp universal cmbd foundation 10.33 • hp universal cmbd foundation 11.0 • hp universal cmbd foundation 2018.05 • hp universal cmbd foundation 2018.08 • hp universal cmbd foundation 2018.11 • hp universal cmbd foundation 2019.02 • hp universal cmbd foundation 2019.05 • hp universal cmbd foundation 2019.11 • hp universal cmbd foundation 2020.05. • microfocus application performance management 9.40 • microfocus application performance management 9.50 • microfocus application performance management 9.51 • microfocus data center automation (<= 2019.11) • microfocus hybrid cloud management (>= 2018.05 <= 2020.05) • microfocus service manager automation 2020.02 • microfocus service manager automation 2020.05

References