CVE-2020-11854

Description

Arbitrary code execution vlnerability in Operation bridge Manager, Application Performance Management and Operations Bridge (containerized) vulnerability in Micro Focus products products Operation Bridge Manager, Operation Bridge (containerized) and Application Performance Management. The vulneravility affects: 1.) Operation Bridge Manager versions 2020.05, 2019.11, 2019.05, 2018.11, 2018.05, 10.63,10.62, 10.61, 10.60, 10.12, 10.11, 10.10 and all earlier versions. 2.) Operations Bridge (containerized) 2020.05, 2019.08, 2019.05, 2018.11, 2018.08, 2018.05. 2018.02 and 2017.11. 3.) Application Performance Management versions 9,51, 9.50 and 9.40 with uCMDB 10.33 CUP 3. The vulnerability could allow Arbitrary code execution.

Risk Information

Base Score

9.8

MODERATE

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS Score

Exploitation Probability

92.403

Associated Vulnerability

Vulnerability	OS Platform
Vulnerabilities CVE-2020-11853,CVE-2020-11854,CVE-2020-11858,CVE-2021-22504 are affected in OpenText Operations Bridge Manager 2018.05	Windows
Vulnerabilities CVE-2020-11853,CVE-2020-11854,CVE-2020-11858,CVE-2021-22504 are affected in OpenText Operations Bridge Manager 2018.11	Windows
Multiple Vulnerabilities are affected in OpenText Operations Bridge Manager 2019.05	Windows
Multiple Vulnerabilities are affected in OpenText Operations Bridge Manager 2019.11	Windows
Multiple Vulnerabilities are affected in OpenText Operations Bridge Manager 2020.05	Windows
Vulnerabilities CVE-2020-11854,CVE-2020-11858,CVE-2021-22504 are affected in OpenText Operations Bridge Manager 10.10	Windows
Vulnerabilities CVE-2020-11854,CVE-2020-11858,CVE-2021-22504 are affected in OpenText Operations Bridge Manager 10.11	Windows
Vulnerabilities CVE-2020-11854,CVE-2020-11858,CVE-2021-22504 are affected in OpenText Operations Bridge Manager 10.12	Windows
Vulnerabilities CVE-2020-11854,CVE-2020-11858,CVE-2021-22504 are affected in OpenText Operations Bridge Manager 10.60	Windows
Vulnerabilities CVE-2020-11854,CVE-2020-11858,CVE-2021-22504 are affected in OpenText Operations Bridge Manager 10.61	Windows
Vulnerabilities CVE-2020-11854,CVE-2020-11858,CVE-2021-22504 are affected in OpenText Operations Bridge Manager 10.62	Windows
Vulnerabilities CVE-2020-11854,CVE-2020-11858,CVE-2021-22504 are affected in OpenText Operations Bridge Manager 10.63	Windows

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234