CVE-2020-11854: Arbitrary code execution vlnerability in Operation bridge Manager, Application Performance Management and Operations Bridge (containerized) products.

Severity: critical (CVSS 9.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 74.4% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2020-10-27 · updated 2026-06-17
Weakness: CWE-798

Description

Arbitrary code execution vlnerability in Operation bridge Manager, Application Performance Management and Operations Bridge (containerized) vulnerability in Micro Focus products products Operation Bridge Manager, Operation Bridge (containerized) and Application Performance Management. The vulneravility affects: 1.) Operation Bridge Manager versions 2020.05, 2019.11, 2019.05, 2018.11, 2018.05, 10.63,10.62, 10.61, 10.60, 10.12, 10.11, 10.10 and all earlier versions. 2.) Operations Bridge (containerized) 2020.05, 2019.08, 2019.05, 2018.11, 2018.08, 2018.05. 2018.02 and 2017.11. 3.) Application Performance Management versions 9,51, 9.50 and 9.40 with uCMDB 10.33 CUP 3. The vulnerability could allow Arbitrary code execution.

Affected products

Micro Focus Application Performance Management: 9.50, 9.51, 9.40
Operations Bridge containerized.: 2017.11, 2018.02, 2018.05, 2018.08, 2018.11, 2019.05 (+2)
Operations Bridge Manager.: through 10.10; 10.11, 10.12, 10.60, 10.61, 10.62, 10.63 (+5)

References

Get alerted when CVE-2020-11854 or the next vulnerability affects your stack