CVE-2021-22504

Description

Arbitrary code execution vulnerability on Micro Focus Operations Bridge Manager product, affecting versions 10.1x, 10.6x, 2018.05, 2018.11, 2019.05, 2019.11, 2020.05, 2020.10. The vulnerability could allow remote attackers to execute arbitrary code on an OBM server.

Risk Information

Base Score

9.8

MODERATE

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS Score

Exploitation Probability

3.018

Associated Vulnerability

Vulnerability	OS Platform
Vulnerabilities CVE-2020-11853,CVE-2020-11854,CVE-2020-11858,CVE-2021-22504 are affected in OpenText Operations Bridge Manager 2018.05	Windows
Vulnerabilities CVE-2020-11853,CVE-2020-11854,CVE-2020-11858,CVE-2021-22504 are affected in OpenText Operations Bridge Manager 2018.11	Windows
Multiple Vulnerabilities are affected in OpenText Operations Bridge Manager 2019.05	Windows
Multiple Vulnerabilities are affected in OpenText Operations Bridge Manager 2019.11	Windows
Multiple Vulnerabilities are affected in OpenText Operations Bridge Manager 2020.05	Windows
Vulnerabilities CVE-2020-11854,CVE-2020-11858,CVE-2021-22504 are affected in OpenText Operations Bridge Manager 10.10	Windows
Vulnerabilities CVE-2020-11854,CVE-2020-11858,CVE-2021-22504 are affected in OpenText Operations Bridge Manager 10.11	Windows
Vulnerabilities CVE-2020-11854,CVE-2020-11858,CVE-2021-22504 are affected in OpenText Operations Bridge Manager 10.12	Windows
Vulnerabilities CVE-2020-11854,CVE-2020-11858,CVE-2021-22504 are affected in OpenText Operations Bridge Manager 10.60	Windows
Vulnerabilities CVE-2020-11854,CVE-2020-11858,CVE-2021-22504 are affected in OpenText Operations Bridge Manager 10.61	Windows
Vulnerabilities CVE-2020-11854,CVE-2020-11858,CVE-2021-22504 are affected in OpenText Operations Bridge Manager 10.62	Windows
Vulnerabilities CVE-2020-11854,CVE-2020-11858,CVE-2021-22504 are affected in OpenText Operations Bridge Manager 10.63	Windows
Vulnerabilities CVE-2021-22504,CVE-2021-22507,CVE-2022-38754 are affected in OpenText Operations Bridge Manager 2020.10	Windows

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234