Micro Focus Operation Bridge Reporter vulnerabilities

4 CVEs affecting Micro Focus Operation Bridge Reporter, 1 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2021-22502, published 2021-02-08.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2021-22502: Micro Focus Operation Bridge Report (OBR) Remote Code Execution Vulnerability, published 2021-02-08. Critical severity, CVSS 9.8. Actively exploited: in CISA KEV since 2021-11-03. EPSS: 96.7% chance of exploitation in the next 30 days. Remote Code execution vulnerability in Micro Focus Operation Bridge Reporter (OBR) product, affecting version 10.40. The vulnerability could be exploited to allow Remote Code Execution on the OBR…
CVE-2020-11857, published 2020-09-22. Critical severity, CVSS 9.8. EPSS: 15.8% chance of exploitation in the next 30 days. An Authorization Bypass vulnerability on Micro Focus Operation Bridge Reporter, affecting version 10.40 and earlier. The vulnerability could allow remote attackers to access the OBR host as a…
CVE-2020-11856, published 2020-09-22. Critical severity, CVSS 9.8. EPSS: 5.2% chance of exploitation in the next 30 days. Arbitrary code execution vulnerability on Micro Focus Operation Bridge Reporter, affecting version 10.40 and earlier. The vulnerability could allow remote attackers to execute arbitrary code on…
CVE-2020-11855, published 2020-09-22. High severity, CVSS 7.8. EPSS: 1.3% chance of exploitation in the next 30 days. An Authorization Bypass vulnerability on Micro Focus Operation Bridge Reporter, affecting version 10.40 and earlier. The vulnerability could allow local attackers on the OBR host to execute code with…