Arbitrary code execution vulnerability affecting multiple Micro Focus products. 1.) Operation Bridge Manager affecting version: 2020.05, 2019.11, 2019.05, 2018.11, 2018.05, versions 10.6x and 10.1x and older versions. 2.) Application Performance Management affecting versions : 9.
Arbitrary code execution vulnerability affecting multiple Micro Focus products. 1.) Operation Bridge Manager affecting version: 2020.05, 2019.11, 2019.05, 2018.11, 2018.05, versions 10.6x and 10.1x and older versions. 2.) Application Performance Management affecting versions : 9.51, 9.50 and 9.40 with uCMDB 10.33 CUP 3 3.) Data Center Automation affected version 2019.11 4.) Operations Bridge…
| Vendor | Product | Versions |
|---|---|---|
| Micro Focus | Operation Bridge Manager | 2020.5, 2019.11, 2019.05, 2018.11, 2018.05, unspecified |
| Micro Focus | Application Performance Management | 9.51, 9.50, 9.40 |
| Micro Focus | Data Center Automation | 2019.11 |
| Micro Focus | Operations Bridge (containerized) | 2019.11, 2019.08, 2019.05, 2018.11, 2018.08, 2018.05, 2018.02, 2017.11 |
| Micro Focus | Universal CMDB | 2020.05, 2019.11, 2019.05, 2019.02, 2018.11, 2018.08, 2018.05, 11.0, 10.33, 10.32, 10.31, 10.30 |
| Micro Focus | Hybrid Cloud Management | 2018.05 |
| Micro Focus | Service Management Automation | 2020.05, 2020.02 |
Not currently listed on the CISA Known Exploited Vulnerabilities (KEV) catalog. EPSS is the best forward-looking signal — see the EPSS row above.
For the full vendor write-up, exploit chains, and reference implementations, see the references list in section 09.
Ask SARA in chat to draft a starting detection for this CVE in your stack of choice.
No directly-cited follow-up CVEs in the KB record for this advisory. The references list in section 09 carries the vendor cross-references.