CVEvulnerability

CVE-2021-22504

9.8 CRITICAL Published 2021-02-12 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2021-02-12
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C

Description

Arbitrary code execution vulnerability on Micro Focus Operations Bridge Manager product, affecting versions 10.1x, 10.6x, 2018.05, 2018.11, 2019.05, 2019.11, 2020.05, 2020.10. The vulnerability could allow remote attackers to execute arbitrary code on an OBM server.

Affected configurations

• microfocus operations bridge manager 10.10 • microfocus operations bridge manager 10.11 • microfocus operations bridge manager 10.12 • microfocus operations bridge manager 10.60 • microfocus operations bridge manager 10.61 • microfocus operations bridge manager 10.62 • microfocus operations bridge manager 10.63 • microfocus operations bridge manager 2018.05 • microfocus operations bridge manager 2018.11 • microfocus operations bridge manager 2019.05 • microfocus operations bridge manager 2019.11 • microfocus operations bridge manager 2020.05 • microfocus operations bridge manager 2020.10

References