by Kastro
Paper/Archive/CVE-2020-11856

CVE-2020-11856

microfocus — Arbitrary code execution vulnerability on Micro Focus Operation Bridge Reporter, affecting version 10.40 and earlier.

EPSS 5%CVSS 9.8
critical.is priorityof 100
48
CVSS 9.8 (NVD)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 92.5.925 × 2018.5No public exploit+100.0SSVC exploitation: unknown+100.0
Description · from the CVE record

Arbitrary code execution vulnerability on Micro Focus Operation Bridge Reporter, affecting version 10.40 and earlier. The vulnerability could allow remote attackers to execute arbitrary code on affected installations of OBR.

Affected

ProductAffectedFixed inSource
Operation Bridge Reporter.10.40 and earlier.–CNA

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References

refsoftwaresupport.softwaregrp.com/doc/KM03710590refzerodayinitiative.com/advisories/ZDI-20-1216