Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.

CVE-2020-11853 Details

Description

Arbitrary code execution vulnerability affecting multiple Micro Focus products. 1.) Operation Bridge Manager affecting version: 2020.05, 2019.11, 2019.05, 2018.11, 2018.05, versions 10.6x and 10.1x and older versions. 2.) Application Performance Management affecting versions : 9.51, 9.50 and 9.40 with uCMDB 10.33 CUP 3 3.) Data Center Automation affected version 2019.11 4.) Operations Bridge (containerized) affecting versions: 2019.11, 2019.08, 2019.05, 2018.11, 2018.08, 2018.05, 2018.02, 2017.11 5.) Universal CMDB affecting version: 2020.05, 2019.11, 2019.05, 2019.02, 2018.11, 2018.08, 2018.05, 11, 10.33, 10.32, 10.31, 10.30 6.) Hybrid Cloud Management affecting version 2020.05 7.) Service Management Automation affecting version 2020.5 and 2020.02. The vulnerability could allow to execute arbitrary code.

Metrics

CVSS 3.x Severity and Vector Strings:

NIST: [email protected]CVSS-B:8.8 HIGHVector:CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CNA: [email protected]CVSS-B:8.8 HIGHVector:CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URL	Source(s)	Tag(s)
http://packetstormsecurity.com/files/161182/Micro-Focus-UCMDB-Remote-Code-Execution.html	CVE
http://packetstormsecurity.com/files/161366/Micro-Focus-Operations-Bridge-Manager-Remote-Code-Execution.html	CVE
https://softwaresupport.softwaregrp.com/doc/KM03747657	CVE
https://softwaresupport.softwaregrp.com/doc/KM03747658	CVE
https://softwaresupport.softwaregrp.com/doc/KM03747854	CVE
https://softwaresupport.softwaregrp.com/doc/KM03747948	CVE
https://softwaresupport.softwaregrp.com/doc/KM03747949	CVE
https://softwaresupport.softwaregrp.com/doc/KM03747950	CVE
https://softwaresupport.softwaregrp.com/doc/KM03749879	CVE
http://packetstormsecurity.com/files/161182/Micro-Focus-UCMDB-Remote-Code-Execution.html	[email protected]
http://packetstormsecurity.com/files/161366/Micro-Focus-Operations-Bridge-Manager-Remote-Code-Execution.html	[email protected]
https://softwaresupport.softwaregrp.com/doc/KM03747657	[email protected]
https://softwaresupport.softwaregrp.com/doc/KM03747658	[email protected]
https://softwaresupport.softwaregrp.com/doc/KM03747854	[email protected]
https://softwaresupport.softwaregrp.com/doc/KM03747948	[email protected]
https://softwaresupport.softwaregrp.com/doc/KM03747949	[email protected]
https://softwaresupport.softwaregrp.com/doc/KM03747950	[email protected]
https://softwaresupport.softwaregrp.com/doc/KM03749879	[email protected]

see all 18 references

Weakness Enumeration

CWE-ID	CWE Name	Source
NVD-CWE-noinfo	Insufficient Information to Classify Weakness	[email protected]

Affected Products

Product	Versions
microfocus operation bridge manager	<= 10.10 10.11 10.12 10.60 10.61
CPE cpe:2.3:a:microfocus:operation_bridge_manager:::::::: cpe:2.3:a:microfocus:operation_bridge_manager:10.11:::::::* cpe:2.3:a:microfocus:operation_bridge_manager:10.12:::::::* cpe:2.3:a:microfocus:operation_bridge_manager:10.60:::::::* cpe:2.3:a:microfocus:operation_bridge_manager:10.61:::::::* cpe:2.3:a:microfocus:operation_bridge_manager:10.62:::::::* cpe:2.3:a:microfocus:operation_bridge_manager:10.63:::::::* Remediation No remediation found in references.
microfocus operations bridge manager	2017.11 2018.02 2018.05 2018.08 2018.11
CPE cpe:2.3:a:microfocus:operations_bridge_manager:2017.11:::::::* cpe:2.3:a:microfocus:operations_bridge_manager:2018.02:::::::* cpe:2.3:a:microfocus:operations_bridge_manager:2018.05:::::::* cpe:2.3:a:microfocus:operations_bridge_manager:2018.08:::::::* cpe:2.3:a:microfocus:operations_bridge_manager:2018.11:::::::* cpe:2.3:a:microfocus:operations_bridge_manager:2019.05:::::::* cpe:2.3:a:microfocus:operations_bridge_manager:2019.08:::::::* cpe:2.3:a:microfocus:operations_bridge_manager:2019.11:::::::* cpe:2.3:a:microfocus:operations_bridge_manager:2020.05:::::::* Remediation No remediation found in references.
hp universal cmbd foundation	10.20 10.30 10.31 10.32 10.33
CPE cpe:2.3:a:hp:universal_cmbd_foundation:10.20:::::::* cpe:2.3:a:hp:universal_cmbd_foundation:10.30:::::::* cpe:2.3:a:hp:universal_cmbd_foundation:10.31:::::::* cpe:2.3:a:hp:universal_cmbd_foundation:10.32:::::::* cpe:2.3:a:hp:universal_cmbd_foundation:10.33:::::::* cpe:2.3:a:hp:universal_cmbd_foundation:11.0:::::::* cpe:2.3:a:hp:universal_cmbd_foundation:2018.05:::::::* cpe:2.3:a:hp:universal_cmbd_foundation:2018.08:::::::* cpe:2.3:a:hp:universal_cmbd_foundation:2018.11:::::::* cpe:2.3:a:hp:universal_cmbd_foundation:2019.02:::::::* cpe:2.3:a:hp:universal_cmbd_foundation:2019.05:::::::* cpe:2.3:a:hp:universal_cmbd_foundation:2019.11:::::::* cpe:2.3:a:hp:universal_cmbd_foundation:2020.05.:::::::* Remediation No remediation found in references.
microfocus application performance management	9.40 9.50 9.51
CPE cpe:2.3:a:microfocus:application_performance_management:9.40:::::::* cpe:2.3:a:microfocus:application_performance_management:9.50:::::::* cpe:2.3:a:microfocus:application_performance_management:9.51:::::::* Remediation No remediation found in references.
microfocus data center automation	<= 2019.11
CPE cpe:2.3:a:microfocus:data_center_automation:::::::: Remediation No remediation found in references.
microfocus hybrid cloud management	>= 2018.05, <= 2020.05
CPE cpe:2.3:a:microfocus:hybrid_cloud_management:::::::: Remediation No remediation found in references.
microfocus service manager automation	2020.02 2020.05
CPE cpe:2.3:a:microfocus:service_manager_automation:2020.02:::::::* cpe:2.3:a:microfocus:service_manager_automation:2020.05:::::::* Remediation No remediation found in references.

Change History

16 change records found show changes

Date	Action	Recorded By
Jun 17, 2026	CVE Modified	[email protected]
Nov 21, 2024	CVE Modified	CVE
May 14, 2024	CVE Modified	[email protected]
Nov 7, 2023	CVE Modified	[email protected]
Nov 7, 2023	CVE Source Update	[email protected]
Nov 16, 2022	Modified Analysis	[email protected]
May 12, 2021	CVE Modified	[email protected]
May 11, 2021	CVE Source Update	[email protected]
Feb 25, 2021	Modified Analysis	[email protected]
Feb 10, 2021	CVE Modified	[email protected]
Feb 3, 2021	Modified Analysis	[email protected]
Jan 28, 2021	CVE Modified	[email protected]
Nov 16, 2020	Initial Analysis	[email protected]
Nov 2, 2020	CVE Modified	[email protected]
Oct 28, 2020	CVE Modified	[email protected]
Oct 28, 2020	CVE Modified	[email protected]

CVE-2020-11853 Details

Description

Metrics

References to Advisories, Solutions, and Tools

Weakness Enumeration

Affected Products

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

Change History

QUICK INFO