VYPR
← All advisories
High severity8.8NVD Advisory· Published Oct 22, 2020· Updated Jun 17, 2026

CVE-2020-11853

CVE-2020-11853

Description

Arbitrary code execution vulnerability affecting multiple Micro Focus products. 1.) Operation Bridge Manager affecting version: 2020.05, 2019.11, 2019.05, 2018.11, 2018.05, versions 10.6x and 10.1x and older versions. 2.) Application Performance Management affecting versions : 9.51, 9.50 and 9.40 with uCMDB 10.33 CUP 3 3.) Data Center Automation affected version 2019.11 4.) Operations Bridge (containerized) affecting versions: 2019.11, 2019.08, 2019.05, 2018.11, 2018.08, 2018.05, 2018.02, 2017.11 5.) Universal CMDB affecting version: 2020.05, 2019.11, 2019.05, 2019.02, 2018.11, 2018.08, 2018.05, 11, 10.33, 10.32, 10.31, 10.30 6.) Hybrid Cloud Management affecting version 2020.05 7.) Service Management Automation affecting version 2020.5 and 2020.02. The vulnerability could allow to execute arbitrary code.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

50
  • Microfocus/Operation Bridge Manager8 versions
    cpe:2.3:a:microfocus:operation_bridge_manager:*:*:*:*:*:*:*:*+ 7 more
    • cpe:2.3:a:microfocus:operation_bridge_manager:*:*:*:*:*:*:*:*range: <=10.10
    • cpe:2.3:a:microfocus:operation_bridge_manager:10.11:*:*:*:*:*:*:*
    • cpe:2.3:a:microfocus:operation_bridge_manager:10.12:*:*:*:*:*:*:*
    • cpe:2.3:a:microfocus:operation_bridge_manager:10.60:*:*:*:*:*:*:*
    • cpe:2.3:a:microfocus:operation_bridge_manager:10.61:*:*:*:*:*:*:*
    • cpe:2.3:a:microfocus:operation_bridge_manager:10.62:*:*:*:*:*:*:*
    • cpe:2.3:a:microfocus:operation_bridge_manager:10.63:*:*:*:*:*:*:*
    • (no CPE)range: 2020.5
  • Microfocus/Operations Bridge Manager10 versions
    cpe:2.3:a:microfocus:operations_bridge_manager:2017.11:*:*:*:*:*:*:*+ 9 more
    • cpe:2.3:a:microfocus:operations_bridge_manager:2017.11:*:*:*:*:*:*:*
    • cpe:2.3:a:microfocus:operations_bridge_manager:2018.02:*:*:*:*:*:*:*
    • cpe:2.3:a:microfocus:operations_bridge_manager:2018.05:*:*:*:*:*:*:*
    • cpe:2.3:a:microfocus:operations_bridge_manager:2018.08:*:*:*:*:*:*:*
    • cpe:2.3:a:microfocus:operations_bridge_manager:2018.11:*:*:*:*:*:*:*
    • cpe:2.3:a:microfocus:operations_bridge_manager:2019.05:*:*:*:*:*:*:*
    • cpe:2.3:a:microfocus:operations_bridge_manager:2019.08:*:*:*:*:*:*:*
    • cpe:2.3:a:microfocus:operations_bridge_manager:2019.11:*:*:*:*:*:*:*
    • cpe:2.3:a:microfocus:operations_bridge_manager:2020.05:*:*:*:*:*:*:*
    • (no CPE)range: 2020.05, 2019.11, 2019.05, 2018.11, 2018.05, 10.6x, 10.1x and older
  • Microfocus/Universal Cmbd Foundation13 versions
    cpe:2.3:a:hp:universal_cmbd_foundation:10.20:*:*:*:*:*:*:*+ 12 more
    • cpe:2.3:a:hp:universal_cmbd_foundation:10.20:*:*:*:*:*:*:*
    • cpe:2.3:a:hp:universal_cmbd_foundation:10.30:*:*:*:*:*:*:*
    • cpe:2.3:a:hp:universal_cmbd_foundation:10.31:*:*:*:*:*:*:*
    • cpe:2.3:a:hp:universal_cmbd_foundation:10.32:*:*:*:*:*:*:*
    • cpe:2.3:a:hp:universal_cmbd_foundation:10.33:*:*:*:*:*:*:*
    • cpe:2.3:a:hp:universal_cmbd_foundation:11.0:*:*:*:*:*:*:*
    • cpe:2.3:a:hp:universal_cmbd_foundation:2018.05:*:*:*:*:*:*:*
    • cpe:2.3:a:hp:universal_cmbd_foundation:2018.08:*:*:*:*:*:*:*
    • cpe:2.3:a:hp:universal_cmbd_foundation:2018.11:*:*:*:*:*:*:*
    • cpe:2.3:a:hp:universal_cmbd_foundation:2019.02:*:*:*:*:*:*:*
    • cpe:2.3:a:hp:universal_cmbd_foundation:2019.05:*:*:*:*:*:*:*
    • cpe:2.3:a:hp:universal_cmbd_foundation:2019.11:*:*:*:*:*:*:*
    • cpe:2.3:a:hp:universal_cmbd_foundation:2020.05.:*:*:*:*:*:*:*
  • Microfocus/Application Performance Management5 versions
    cpe:2.3:a:microfocus:application_performance_management:9.40:*:*:*:*:*:*:*+ 4 more
    • cpe:2.3:a:microfocus:application_performance_management:9.40:*:*:*:*:*:*:*
    • cpe:2.3:a:microfocus:application_performance_management:9.50:*:*:*:*:*:*:*
    • cpe:2.3:a:microfocus:application_performance_management:9.51:*:*:*:*:*:*:*
    • (no CPE)range: 9.51
    • (no CPE)range: 9.51, 9.50, 9.40 with uCMDB 10.33 CUP 3
  • Microfocus/Data Center Automation2 versions
    cpe:2.3:a:microfocus:data_center_automation:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:microfocus:data_center_automation:*:*:*:*:*:*:*:*range: <=2019.11
    • (no CPE)range: 2019.11
  • Microfocus/Hybrid Cloud Management
    cpe:2.3:a:microfocus:hybrid_cloud_management:*:*:*:*:*:*:*:*
    Range: >=2018.05,<=2020.05
  • Microfocus/Service Manager Automation2 versions
    cpe:2.3:a:microfocus:service_manager_automation:2020.02:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:microfocus:service_manager_automation:2020.02:*:*:*:*:*:*:*
    • cpe:2.3:a:microfocus:service_manager_automation:2020.05:*:*:*:*:*:*:*
  • Microfocus/Hybrid Cloud Management X (HCMX)cpe-rescue2 versions
    2018.05+ 1 more
    • (no CPE)range: 2018.05
    • (no CPE)range: 2020.05
  • Microfocus/Data Center Automation Containerizedcpe-rescue
    Range: 2019.11
  • Microfocus/Operations Bridge - Containerizedcpe-rescue2 versions
    2019.11+ 1 more
    • (no CPE)range: 2019.11
    • (no CPE)range: 2019.11, 2019.08, 2019.05, 2018.11, 2018.08, 2018.05, 2018.02, 2017.11
  • Microfocus/Service Management Automationcpe-rescue2 versions
    2020.05+ 1 more
    • (no CPE)range: 2020.05
    • (no CPE)range: 2020.5, 2020.02
  • Microfocus/Universal Cmdbcpe-rescue2 versions
    2020.05+ 1 more
    • (no CPE)range: 2020.05
    • (no CPE)range: 2020.05, 2019.11, 2019.05, 2019.02, 2018.11, 2018.08, 2018.05, 11, 10.33, 10.32, 10.31, 10.30

Patches

Vulnerability mechanics

References

9

News mentions

0

No linked articles in our index yet.