CVE-2020-118538.8High

CVE-2020-11853: Arbitrary code execution vulnerability on multiple Micro Focus products

Micro Focus · Operation Bridge Manager

Affected: Micro Focus Operation Bridge Manager · Exploitation: check available, not yet exploited

Not in CyberSIXT coverage yet: no article names this CVE. This page shows the public record.

77.0%probability of exploitation in the next 30 days

99th percentile

050100

Higher than 99% of scored CVEs

8.8HighCVSS 3.1

LowMediumHighCrit.

DescriptionCVE.org

Arbitrary code execution vulnerability affecting multiple Micro Focus products. 1.) Operation Bridge Manager affecting version: 2020.05, 2019.11, 2019.05, 2018.11, 2018.05, versions 10.6x and 10.1x and older versions. 2.) Application Performance Management affecting versions : 9.51, 9.50 and 9.40 with uCMDB 10.33 CUP 3 3.) Data Center Automation affected version 2019.11 4.) Operations Bridge (containerized) affecting versions: 2019.11, 2019.08, 2019.05, 2018.11, 2018.08, 2018.05, 2018.02, 2017.11 5.) Universal CMDB affecting version: 2020.05, 2019.11, 2019.05, 2019.02, 2018.11, 2018.08, 2018.05, 11, 10.33, 10.32, 10.31, 10.30 6.) Hybrid Cloud Management affecting version 2020.05 7.) Service Management Automation affecting version 2020.5 and 2020.02. The vulnerability could allow to execute arbitrary code.

Affected products7

From the CVE record. A product or version that is not listed is unknown, not unaffected.

Micro Focus · Operation Bridge Manager2020.5; 2019.11; 2019.05; 2018.11; 2018.05; up to and including 10.63
Micro Focus · Application Performance Management9.51; 9.50; 9.40
Micro Focus · Data Center Automation2019.11
Micro Focus · Operations Bridge (containerized)2019.11; 2019.08; 2019.05; 2018.11; 2018.08; 2018.05 and 2 more
Micro Focus · Universal CMDB2020.05; 2019.11; 2019.05; 2019.02; 2018.11; 2018.08 and 6 more
Micro Focus · Hybrid Cloud Managementfrom 2018.05 up to and including 2020.05
Micro Focus · Service Management Automation2020.05; 2020.02

On the Atlas

Every published CVE is on the CyberSIXT Atlas, grouped by weakness, vendor and month.

Open the Atlas

Exploitation: Check available, not yet exploited. A public nuclei template can confirm it on a system you are authorised to test.
CISA KEV: Not listed
Public check: Micro Focus Operations Bridge Manager <=2020.05 - Remote Code Execution · nuclei template in projectdiscovery/nuclei-templates
Vendor: Micro Focus
Published: October 2020
Band: Check available, not yet exploited, October 2020

CoverageNo articles yet

No CyberSIXT article names CVE-2020-11853 yet, so there is no coverage timeline, action brief or change log for it. Everything on this page comes from the public CVE record, CISA KEV, EPSS and the nuclei template index. Search the archive or see the CVEs in the news.