Micro Focus Operations Agent vulnerabilities

7 CVEs affecting Micro Focus Operations Agent, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-2123, published 2026-03-31.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2021-22505, published 2021-04-13. Critical severity, CVSS 9.8. EPSS: 1.5% chance of exploitation in the next 30 days. Escalation of privileges vulnerability in Micro Focus Operations Agent, affects versions 12.0x, 12.10, 12.11, 12.12, 12.14 and 12.15. The vulnerability could be exploited to escalate privileges and…
CVE-2019-17085, published 2019-11-18. Medium severity, CVSS 6.5. EPSS: 0.8% chance of exploitation in the next 30 days. XXE attack vulnerability on Micro Focus Operations Agent, affected version 12.0, 12.01, 12.02, 12.03, 12.04, 12.05, 12.06, 12.10, 12.11. The vulnerability could be exploited to do an XXE attack on…
CVE-2020-11861, published 2020-09-18. High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days. Unauthorized escalation of local privileges vulnerability on Micro Focus Operation Agent, affecting all versions prior to versions 12.11. The vulnerability could be exploited to escalate the local…
CVE-2021-38129, published 2022-01-25. Low severity, CVSS 3.3. EPSS: 0.2% chance of exploitation in the next 30 days. Escalation of privileges vulnerability in Micro Focus in Micro Focus Operations Agent, affecting versions 12.x up to and including 12.21. The vulnerability could be exploited by a non-privileged…
CVE-2024-5532, published 2024-10-28. Medium severity, CVSS 4.8. EPSS: 0.2% chance of exploitation in the next 30 days. Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in OpenText™ Operations Agent. The XSS vulnerability could allow an attacker with local…
CVE-2024-0622, published 2024-02-15. High severity, CVSS 7.8. EPSS: 0.1% chance of exploitation in the next 30 days. Local privilege escalation vulnerability affects OpenText Operations Agent product versions 12.15 and 12.20-12.25 when installed on Non-Windows platforms. The vulnerability could allow local…
CVE-2026-2123, published 2026-03-31. High severity, CVSS 7.8. EPSS: 0.1% chance of exploitation in the next 30 days. A security audit identified a privilege escalation vulnerability in Operations Agent(<=OA 12.29) on Windows. Under specific conditions Operations Agent may run executables from specific writeable…