Micro Focus Service Management Automation vulnerabilities

4 CVEs affecting Micro Focus Service Management Automation, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2020-11844, published 2020-05-29.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2019-5736, published 2019-02-11. High severity, CVSS 8.6. EPSS: 98.5% chance of exploitation in the next 30 days. runc through 1.0-rc6, as used in Docker before 18.09.2 and other products, allows attackers to overwrite the host runc binary (and consequently obtain host root access) by leveraging the ability to…
CVE-2018-6498, published 2018-08-30. Critical severity, CVSS 9.8. EPSS: 3.1% chance of exploitation in the next 30 days. Remote Code Execution in the following products Hybrid Cloud Management Containerized Suite HCM2017.11, HCM2018.02, HCM2018.05, Operations Bridge Containerized Suite 2017.11, 2018.02, 2018.05, Data…
CVE-2018-6499, published 2018-08-30. Critical severity, CVSS 9.8. EPSS: 2.4% chance of exploitation in the next 30 days. Remote Code Execution in the following products Hybrid Cloud Management Containerized Suite HCM2017.11, HCM2018.02, HCM2018.05, Operations Bridge Containerized Suite 2017.11, 2018.02, 2018.05, Data…
CVE-2020-11844, published 2020-05-29. Critical severity, CVSS 9.8. EPSS: 2.1% chance of exploitation in the next 30 days. Incorrect Authorization vulnerability in Micro Focus Container Deployment Foundation component affects products: - Hybrid Cloud Management. Versions 2018.05 to 2019.11. - ArcSight Investigate.…