csirt@kutim:~/threat-intel/cve/CVE-2020-11853

Katalog CVE

CVSS 8.8 · High EPSS 77,0%

Kerentanan pada microfocus operation bridge manager, microfocus operations bridge manager +5 lainnya. Skor CVSS 3.1 8.8 (High) menurut NVD.

Deskripsi (NVD)

Arbitrary code execution vulnerability affecting multiple Micro Focus products. 1.) Operation Bridge Manager affecting version: 2020.05, 2019.11, 2019.05, 2018.11, 2018.05, versions 10.6x and 10.1x and older versions. 2.) Application Performance Management affecting versions : 9.51, 9.50 and 9.40 with uCMDB 10.33 CUP 3 3.) Data Center Automation affected version 2019.11 4.) Operations Bridge (containerized) affecting versions: 2019.11, 2019.08, 2019.05, 2018.11, 2018.08, 2018.05, 2018.02, 2017.11 5.) Universal CMDB affecting version: 2020.05, 2019.11, 2019.05, 2019.02, 2018.11, 2018.08, 2018.05, 11, 10.33, 10.32, 10.31, 10.30 6.) Hybrid Cloud Management affecting version 2020.05 7.) Service Management Automation affecting version 2020.5 and 2020.02. The vulnerability could allow to execute arbitrary code.

Rincian

Terbit di NVD
22 Oktober 2020
Terakhir diubah
17 Juni 2026
Status NVD
Modified
CVSS 3.1
8.8 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator
EPSS (30 hari)
77,0% peluang dieksploitasi; lebih tinggi dari 99,5% CVE lain

Produk dan versi terdampak

VendorProdukVersi terdampak
microfocus operation bridge manager Semua versi hingga 10.10
microfocus operation bridge manager Versi 10.11
microfocus operation bridge manager Versi 10.12
microfocus operation bridge manager Versi 10.60
microfocus operation bridge manager Versi 10.61
microfocus operation bridge manager Versi 10.62
microfocus operation bridge manager Versi 10.63
microfocus operations bridge manager Versi 2017.11
microfocus operations bridge manager Versi 2018.02
microfocus operations bridge manager Versi 2018.05
microfocus operations bridge manager Versi 2018.08
microfocus operations bridge manager Versi 2018.11
microfocus operations bridge manager Versi 2019.05
microfocus operations bridge manager Versi 2019.08
microfocus operations bridge manager Versi 2019.11
microfocus operations bridge manager Versi 2020.05
hp universal cmbd foundation Versi 10.20
hp universal cmbd foundation Versi 10.30
hp universal cmbd foundation Versi 10.31
hp universal cmbd foundation Versi 10.32
hp universal cmbd foundation Versi 10.33
hp universal cmbd foundation Versi 11.0
hp universal cmbd foundation Versi 2018.05
hp universal cmbd foundation Versi 2018.08
hp universal cmbd foundation Versi 2018.11
hp universal cmbd foundation Versi 2019.02
hp universal cmbd foundation Versi 2019.05
hp universal cmbd foundation Versi 2019.11
hp universal cmbd foundation Versi 2020.05.
microfocus application performance management Versi 9.40
microfocus application performance management Versi 9.50
microfocus application performance management Versi 9.51
microfocus data center automation Semua versi hingga 2019.11
microfocus hybrid cloud management Versi 2018.05 hingga 2020.05
microfocus service manager automation Versi 2020.02
microfocus service manager automation Versi 2020.05

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

Sumber: NVD · CVE.org · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 5 Okt 2026, 20:10 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.