← CVE Intelligence

CVE-2020-11853

Arbitrary code execution vulnerability on multiple Micro Focus products PUBLISHED

Description (CNA)

Arbitrary code execution vulnerability affecting multiple Micro Focus products. 1.) Operation Bridge Manager affecting version: 2020.05, 2019.11, 2019.05, 2018.11, 2018.05, versions 10.6x and 10.1x and older versions. 2.) Application Performance Management affecting versions : 9.51, 9.50 and 9.40 with uCMDB 10.33 CUP 3 3.) Data Center Automation affected version 2019.11 4.) Operations Bridge (containerized) affecting versions: 2019.11, 2019.08, 2019.05, 2018.11, 2018.08, 2018.05, 2018.02, 2017.11 5.) Universal CMDB affecting version: 2020.05, 2019.11, 2019.05, 2019.02, 2018.11, 2018.08, 2018.05, 11, 10.33, 10.32, 10.31, 10.30 6.) Hybrid Cloud Management affecting version 2020.05 7.) Service Management Automation affecting version 2020.5 and 2020.02. The vulnerability could allow to execute arbitrary code.

Affected (CNA)

Vendor / productVersions
Micro Focus / Operation Bridge Manageraffected 2020.5; affected 2019.11; affected 2019.05; affected 2018.11; affected 2018.05; affected unspecified through 10.63
Micro Focus / Application Performance Managementaffected 9.51; affected 9.50; affected 9.40
Micro Focus / Data Center Automationaffected 2019.11
Micro Focus / Operations Bridge (containerized)affected 2019.11; affected 2019.08; affected 2019.05; affected 2018.11; affected 2018.08; affected 2018.05; affected 2018.02; affected 2017.11
Micro Focus / Universal CMDBaffected 2020.05; affected 2019.11; affected 2019.05; affected 2019.02; affected 2018.11; affected 2018.08; affected 2018.05; affected 11.0; affected 10.33; affected 10.32; affected 10.31; affected 10.30
Micro Focus / Hybrid Cloud Managementaffected 2018.05 through 2020.05
Micro Focus / Service Management Automationaffected 2020.05; affected 2020.02

CWE

No CWE identifiers supplied.

References

ADP enrichment

CVE

No English description supplied.