CVE-2020-11853

EPSS 76.99%
Veröffentlicht 22.10.2020 21:15:12
Zuletzt bearbeitet 21.11.2024 04:58:45
Erkennungen
Login

Arbitrary code execution vulnerability on multiple Micro Focus products

Arbitrary code execution vulnerability affecting multiple Micro Focus products. 1.) Operation Bridge Manager affecting version: 2020.05, 2019.11, 2019.05, 2018.11, 2018.05, versions 10.6x and 10.1x and older versions. 2.) Application Performance Management affecting versions : 9.51, 9.50 and 9.40 with uCMDB 10.33 CUP 3 3.) Data Center Automation affected version 2019.11 4.) Operations Bridge (containerized) affecting versions: 2019.11, 2019.08, 2019.05, 2018.11, 2018.08, 2018.05, 2018.02, 2017.11 5.) Universal CMDB affecting version: 2020.05, 2019.11, 2019.05, 2019.02, 2018.11, 2018.08, 2018.05, 11, 10.33, 10.32, 10.31, 10.30 6.) Hybrid Cloud Management affecting version 2020.05 7.) Service Management Automation affecting version 2020.5 and 2020.02. The vulnerability could allow to execute arbitrary code.

Betroffene Produkte Warnungen 0 Metriken 4 CWE 0 Referenzen 12

NVD 36 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Microfocus ≫ Operation Bridge Manager Version <= 10.10

Microfocus ≫ Operation Bridge Manager Version 10.11

Microfocus ≫ Operation Bridge Manager Version 10.12

Microfocus ≫ Operation Bridge Manager Version 10.60

Microfocus ≫ Operation Bridge Manager Version 10.61

Microfocus ≫ Operation Bridge Manager Version 10.62

Microfocus ≫ Operation Bridge Manager Version 10.63

Microfocus ≫ Operations Bridge Manager Version 2017.11

Microfocus ≫ Operations Bridge Manager Version 2018.02

Microfocus ≫ Operations Bridge Manager Version 2018.05

Microfocus ≫ Operations Bridge Manager Version 2018.08

Microfocus ≫ Operations Bridge Manager Version 2018.11

Microfocus ≫ Operations Bridge Manager Version 2019.05

Microfocus ≫ Operations Bridge Manager Version 2019.08

Microfocus ≫ Operations Bridge Manager Version 2019.11

Microfocus ≫ Operations Bridge Manager Version 2020.05

Hp ≫ Universal Cmbd Foundation Version 10.20

Hp ≫ Universal Cmbd Foundation Version 10.30

Hp ≫ Universal Cmbd Foundation Version 10.31

Hp ≫ Universal Cmbd Foundation Version 10.32

Hp ≫ Universal Cmbd Foundation Version 10.33

Hp ≫ Universal Cmbd Foundation Version 11.0

Hp ≫ Universal Cmbd Foundation Version 2018.05

Hp ≫ Universal Cmbd Foundation Version 2018.08

Hp ≫ Universal Cmbd Foundation Version 2018.11

Hp ≫ Universal Cmbd Foundation Version 2019.02

Hp ≫ Universal Cmbd Foundation Version 2019.05

Hp ≫ Universal Cmbd Foundation Version 2019.11

Hp ≫ Universal Cmbd Foundation Version 2020.05.

Microfocus ≫ Application Performance Management Version 9.40

Microfocus ≫ Application Performance Management Version 9.50

Microfocus ≫ Application Performance Management Version 9.51

Microfocus ≫ Data Center Automation Version <= 2019.11

Microfocus ≫ Hybrid Cloud Management Version >= 2018.05 <= 2020.05

Microfocus ≫ Service Manager Automation Version 2020.02

Microfocus ≫ Service Manager Automation Version 2020.05

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	76.99%	0.995

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
NIST	8.8	2.8	5.9	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
NIST	6.5	8	6.4	AV:N/AC:L/Au:S/C:P/I:P/A:P
OpenText	8.8	2.8	5.9	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H