CVE-2021-22502: Micro Focus Operation Bridge Report (OBR) Remote Code Execution Vulnerability

Critical severity, CVSS 9.8. Actively exploited: in CISA KEV since 2021-11-03. EPSS: 96.7% chance of exploitation in the next 30 days.

Remote Code execution vulnerability in Micro Focus Operation Bridge Reporter (OBR) product, affecting version 10.40. The vulnerability could be exploited to allow Remote Code Execution on the OBR server.

Affected products

• Micro Focus Operation Bridge Reporter: version 10.40 only

Published 2021-02-08. Last modified 2026-06-17.