Micro Focus Application Performance Management vulnerabilities

5 CVEs affecting Micro Focus Application Performance Management, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2021-22514, published 2021-04-28.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2020-11853, published 2020-10-22. High severity, CVSS 8.8. EPSS: 77% chance of exploitation in the next 30 days. Arbitrary code execution vulnerability affecting multiple Micro Focus products. 1.) Operation Bridge Manager affecting version: 2020.05, 2019.11, 2019.05, 2018.11, 2018.05, versions 10.6x and 10.1x…
CVE-2020-11854, published 2020-10-27. Critical severity, CVSS 9.8. EPSS: 74.4% chance of exploitation in the next 30 days. Arbitrary code execution vlnerability in Operation bridge Manager, Application Performance Management and Operations Bridge (containerized) vulnerability in Micro Focus products products Operation…
CVE-2021-22514, published 2021-04-28. Critical severity, CVSS 9.8. EPSS: 2% chance of exploitation in the next 30 days. An arbitrary code execution vulnerability exists in Micro Focus Application Performance Management, affecting versions 9.40, 9.50 and 9.51. The vulnerability could allow remote attackers to execute…
CVE-2021-22499, published 2021-02-06. Medium severity, CVSS 4.8. EPSS: 0.6% chance of exploitation in the next 30 days. Persistent Cross-Site scripting vulnerability in Micro Focus Application Performance Management product, affecting versions 9.40, 9.50 and 9.51. The vulnerability could allow persistent XSS attack.
CVE-2021-22500, published 2021-02-06. Medium severity, CVSS 6.5. EPSS: 0.5% chance of exploitation in the next 30 days. Cross Site Request Forgery vulnerability in Micro Focus Application Performance Management product, affecting versions 9.40, 9.50 and 9.51. The vulnerability could be exploited by attacker to trick…