CVE-2022-38754

中 5.4CVE-2022-38754 · 08/12/2022 公開 · 17/06/2026 更新

要点

CVE-2022-38754 は operations bridge (microfocus), operations bridge manager (microfocus) に影響する深刻度「中」 (CVSS 5.4) の脆弱性です。
今後30日間に悪用される確率（EPSS）：0.67%（全脆弱性の 52.0% より高い）。
対処：2022.11 以降に更新してください。

パッケージ	影響を受けるバージョン	修正済みバージョン
operations bridge microfocus	`< 2022.11`	`2022.11`
operations bridge manager microfocus	`< 2022.11`	`2022.11`

概要

A potential vulnerability has been identified in Micro Focus Operations Bridge - Containerized. The vulnerability could be exploited by a malicious authenticated OBM (Operations Bridge Manager) user to run Java Scripts in the browser context of another OBM user. Please note: The vulnerability is only applicable if the Operations Bridge Manager capability is deployed. A potential vulnerability has been identified in Micro Focus Operations Bridge Manager (OBM). The vulnerability could be exploited by a malicious authenticated OBM user to run Java Scripts in the browser context of another OBM user. This issue affects: Micro Focus Micro Focus Operations Bridge Manager versions prior to 2022.11. Micro Focus Micro Focus Operations Bridge- Containerized versions prior to 2022.11.