| Package | Affected versions | Patched versions |
|---|---|---|
| universal cmbd foundation | = 10.20= 10.30= 10.31= 10.32= 10.33= 11.0= 2018.05= 2018.08= 2018.11= 2019.02= 2019.05= 2019.11= 2020.05. | |
| application performance management | = 9.40= 9.50= 9.51 | |
| data center automation | ≤ 2019.11 | |
| hybrid cloud management | ≥ 2018.05, ≤ 2020.05 | |
| operation bridge manager | = 10.11= 10.12= 10.60= 10.61= 10.62= 10.63≤ 10.10 | |
| operations bridge manager | = 2017.11= 2018.02= 2018.05= 2018.08= 2018.11= 2019.05= 2019.08= 2019.11= 2020.05 | |
| service manager automation | = 2020.02= 2020.05 |
Arbitrary code execution vulnerability affecting multiple Micro Focus products. 1.) Operation Bridge Manager affecting version: 2020.05, 2019.11, 2019.05, 2018.11, 2018.05, versions 10.6x and 10.1x and older versions. 2.) Application Performance Management affecting versions : 9.51, 9.50 and 9.40 with uCMDB 10.33 CUP 3 3.) Data Center Automation affected version 2019.11 4.) Operations Bridge (containerized) affecting versions: 2019.11, 2019.08, 2019.05, 2018.11, 2018.08, 2018.05, 2018.02, 2017.11 5.) Universal CMDB affecting version: 2020.05, 2019.11, 2019.05, 2019.02, 2018.11, 2018.08, 2018.05, 11, 10.33, 10.32, 10.31, 10.30 6.) Hybrid Cloud Management affecting version 2020.05 7.) Service Management Automation affecting version 2020.5 and 2020.02. The vulnerability could allow to execute arbitrary code.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free