CVE-2022-38754: Micro Focus Operations Bridge

Medium severity, CVSS 5.4. EPSS: 0.7% chance of exploitation in the next 30 days.

A potential vulnerability has been identified in Micro Focus Operations Bridge - Containerized. The vulnerability could be exploited by a malicious authenticated OBM (Operations Bridge Manager) user to run Java Scripts in the browser context of another OBM user. Please note: The vulnerability is only applicable if the Operations Bridge Manager capability is deployed. A potential vulnerability has been identified in Micro Focus Operations Bridge Manager (OBM). The vulnerability could be exploited by a malicious authenticated OBM user to run Java Scripts in the browser context of another OBM user. This issue affects: Micro Focus Micro Focus Operations Bridge Manager versions prior to 2022.11. Micro Focus Micro Focus Operations Bridge- Containerized versions prior to 2022.11.

Affected products

• Micro Focus Operations Bridge: before 2022.11 (fixed in 2022.11)
• Micro Focus Operations Bridge Manager: before 2022.11 (fixed in 2022.11)

Published 2022-12-08. Last modified 2026-06-17.