CVE-2021-22504
Critical
Published: 12 February 2021
Published
12 February 2021
Modified
21 November 2024
KEV Added
—
Patch
—
CVSS Score v3.1
9.8
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS Score
0.0302
86.9th percentile
Risk Priority
21
60% EPSS · 20% KEV · 20% CVSS
Summary
CVE-2021-22504 is a critical-severity an unspecified weakness vulnerability in Microfocus Operations Bridge Manager. Its CVSS base score is 9.8 (Critical).
Operationally, ranked in the top 13.1% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2021-9650
Vulnerability details
Arbitrary code execution vulnerability on Micro Focus Operations Bridge Manager product, affecting versions 10.1x, 10.6x, 2018.05, 2018.11, 2019.05, 2019.11, 2020.05, 2020.10. The vulnerability could allow remote attackers to execute arbitrary code on an OBM server.
- CWE(s)
Related Threats
No named actor attribution yet. ATT&CK technique mapping in progress for this CVE.
Affected Assets
microfocus
operations bridge manager
10.10, 10.11, 10.12, 10.60, 10.61
Mitigating Controls
No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.