9.8
Critical
CVE-2021-22502 Micro Focus Operation Bridge Report (OBR) Remote Code Execution Vulnerability
Active exploitation observed
· CISA KEV catalogue
Required action
Apply updates per vendor instructions.
Ransomware campaigns
Not observed so far
Weakness
CWE-20, CWE-78
Description
Remote Code execution vulnerability in Micro Focus Operation Bridge Reporter (OBR) product, affecting version 10.40. The vulnerability could be exploited to allow Remote Code Execution on the OBR server.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Operation Bridge Reporter. | Versions not published |
Other CVEs of Operation Bridge Reporter.
The 4 CVEs of Operation Bridge Reporter. →
CVE-2020-11856
Arbitrary code execution vulnerability on Micro Focus Operation Bridge Reporter, affecting version 10.40 and earlier
Not rated
CVE-2020-11857
An Authorization Bypass vulnerability on Micro Focus Operation Bridge Reporter, affecting version 10.40 and earlier
Not rated
CVE-2020-11855
An Authorization Bypass vulnerability on Micro Focus Operation Bridge Reporter, affecting version 10.40 and earlier
Not rated