Vulnerability Description
Remote Code execution vulnerability in Micro Focus Operation Bridge Reporter (OBR) product, affecting version 10.40. The vulnerability could be exploited to allow Remote Code Execution on the OBR server.
CVSS Score
CRITICAL
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Microfocus | Operation Bridge Reporter | 10.40 |
Related Weaknesses (CWE)
References
- http://packetstormsecurity.com/files/162408/Micro-Focus-Operations-Bridge-ReportExploitThird Party AdvisoryVDB Entry
- https://softwaresupport.softwaregrp.com/doc/KM03775947Vendor Advisory
- https://www.zerodayinitiative.com/advisories/ZDI-21-153/Third Party AdvisoryVDB Entry
- https://www.zerodayinitiative.com/advisories/ZDI-21-154/Third Party AdvisoryVDB Entry
- http://packetstormsecurity.com/files/162408/Micro-Focus-Operations-Bridge-ReportExploitThird Party AdvisoryVDB Entry
- https://softwaresupport.softwaregrp.com/doc/KM03775947Vendor Advisory
- https://www.zerodayinitiative.com/advisories/ZDI-21-153/Third Party AdvisoryVDB Entry
- https://www.zerodayinitiative.com/advisories/ZDI-21-154/Third Party AdvisoryVDB Entry
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-US Government Resource
FAQ
What is CVE-2021-22502?
CVE-2021-22502 is a vulnerability with a CVSS score of 9.8 (CRITICAL). Remote Code execution vulnerability in Micro Focus Operation Bridge Reporter (OBR) product, affecting version 10.40. The vulnerability could be exploited to allow Remote Code Execution on the OBR serv...
How severe is CVE-2021-22502?
CVE-2021-22502 has been rated CRITICAL with a CVSS base score of 9.8/10. This is considered a critical vulnerability requiring immediate attention.
Is there a patch for CVE-2021-22502?
Check the references section above for vendor advisories and patch information. Affected products include: Microfocus Operation Bridge Reporter.