Vulnerabilities > CVE-2020-11853

CVSS 8.8 - HIGH

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

LOW

Confidentiality impact

HIGH

Integrity impact

HIGH

Availability impact

HIGH

network

low complexity

microfocus

NVD

Published: 2020-10-22

Updated: 2024-11-21

Summary

Arbitrary code execution vulnerability affecting multiple Micro Focus products. 1.) Operation Bridge Manager affecting version: 2020.05, 2019.11, 2019.05, 2018.11, 2018.05, versions 10.6x and 10.1x and older versions. 2.) Application Performance Management affecting versions : 9.51, 9.50 and 9.40 with uCMDB 10.33 CUP 3 3.) Data Center Automation affected version 2019.11 4.) Operations Bridge (containerized) affecting versions: 2019.11, 2019.08, 2019.05, 2018.11, 2018.08, 2018.05, 2018.02, 2017.11 5.) Universal CMDB affecting version: 2020.05, 2019.11, 2019.05, 2019.02, 2018.11, 2018.08, 2018.05, 11, 10.33, 10.32, 10.31, 10.30 6.) Hybrid Cloud Management affecting version 2020.05 7.) Service Management Automation affecting version 2020.5 and 2020.02. The vulnerability could allow to execute arbitrary code.

Vulnerable Configurations

Part	Description	Count
Application	Microfocus Microfocus Operations Bridge Manager 2020.05 Microfocus Operations Bridge Manager 2019.11 Microfocus Operations Bridge Manager 2019.05 Microfocus Operations Bridge Manager 2018.11 Microfocus Operations Bridge Manager 2018.05 Microfocus Operations Bridge Manager 2019.08 Microfocus Operations Bridge Manager 2018.08 Microfocus Operations Bridge Manager 2018.02 Microfocus Operations Bridge Manager 2017.11 Microfocus Operation Bridge Manager 10.11 Microfocus Operation Bridge Manager 10.12 Microfocus Operation Bridge Manager 10.60 Microfocus Operation Bridge Manager 10.61 Microfocus Operation Bridge Manager 10.62 Microfocus Operation Bridge Manager 10.63 Microfocus Operation Bridge Manager 10.10 Microfocus Application Performance Management 9.50 Microfocus Application Performance Management 9.40 Microfocus Application Performance Management 9.51 Microfocus Data Center Automation 2017.01 Microfocus Data Center Automation 2017.05 Microfocus Data Center Automation 2017.08 Microfocus Data Center Automation 2017.09 Microfocus Data Center Automation 2017.11 Microfocus Data Center Automation 2018.02 Microfocus Data Center Automation 2018.05 Microfocus Data Center Automation 2018.08 Microfocus Data Center Automation 2018.11 Microfocus Data Center Automation 2019.02 Microfocus Data Center Automation 2019.05 Microfocus Data Center Automation 2019.08 Microfocus Data Center Automation 2019.11 Microfocus Hybrid Cloud Management 2018.05 Microfocus Hybrid Cloud Management 2020.05 Microfocus Service Manager Automation 2020.02 Microfocus Service Manager Automation 2020.05	38
Application	Hp HP Universal Cmbd Foundation 10.20 HP Universal Cmbd Foundation 2018.05 HP Universal Cmbd Foundation 2018.08 HP Universal Cmbd Foundation 2018.11 HP Universal Cmbd Foundation 2019.02 HP Universal Cmbd Foundation 2019.05 HP Universal Cmbd Foundation 2019.11 HP Universal Cmbd Foundation 2020.05. HP Universal Cmbd Foundation 11.0 HP Universal Cmbd Foundation 10.30 HP Universal Cmbd Foundation 10.31 HP Universal Cmbd Foundation 10.32 HP Universal Cmbd Foundation 10.33	13

Vulnerabilities > CVE-2020-11853 {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Vulnerabilities","item":"https://cyber.vumetric.com/vulns/"},{"@type":"ListItem","position":2,"name":"CVE-2020-11853"}]}

Summary

Vulnerable Configurations

References

Vulnerabilities > CVE-2020-11853