Vendor

Micro Focus

2 of 6 Micro Focus CVEs in Patchfirst (33%) are in of vulnerabilities exploited in the wild.

CVEs: 6
In CISA KEV: 233%
Known ransomware use: 0
Median days to KEV: 245; from publication
Latest KEV listing: 3 Nov 2021

Watch Micro Focus Subscribe (RSS) JSON Feed All feeds

Products

In KEVOther CVEs

ProductKEVCVEs
Micro Focus Access Manager In KEV: 1 CVEs: 1
Operation Bridge Reporter (OBR) In KEV: 1 CVEs: 1
Secure Messaging Gateway In KEV: 0 CVEs: 2
Application Performance Management In KEV: 0 CVEs: 1
Operation Bridge Manager In KEV: 0 CVEs: 1

Top ATT&CK techniques

What attackers do with Micro Focus CVEs

TechniqueCVEs
T1190Exploit Public-Facing Application CVEs: 2
T1059Command and Scripting Interpreter CVEs: 1
T1005Data from Local System CVEs: 1

Open in ATT&CK Navigator

A layer for MITRE’s ATT&CK Navigator: techniques scored by the highest Patchfirst priority among their CVEs, neutral to red, with the CVE ids in each comment. “Open in Navigator” loads https://patchfirst.co/navigator/vendor/micro-focus.json. Or download it and in Navigator choose Open Existing Layer → Upload from local.

Counts are Micro Focus CVEs linked to the technique. Each link’s provenance is on the CVE page.

Micro Focus CVEs

6 CVEs, by priority

CVE-2021-22502Micro Focus Operation Bridge Report (OBR) Remote Code Execution Vulnerability
Micro Focus · Operation Bridge Reporter (OBR)KEVPublic exploitCritical · 9.8T1190Exploit Public-Facing Application T1059Command and Scripting Interpreter
96.7%Top 0.11%
69.8priority
CVE-2020-11854Arbitrary code execution vlnerability in Operation bridge Manager, Application Performance Management and Operations…
Micro Focus · Application Performance ManagementPublic exploitCritical · 9.8
74.4%Top 0.51%
67.4priority
CVE-2021-22506Micro Focus Access Manager Information Leakage Vulnerability
Micro Focus · Micro Focus Access ManagerKEVHigh · 7.5T1190Exploit Public-Facing Application T1005Data from Local System
25.7%Top 2%
62.8priority
CVE-2018-12464Unauthenticated SQL injection in Micro Focus Secure Messaging Gateway
Micro Focus · Secure Messaging GatewayPublic exploitCritical · 10.0
80.7%Top 0.37%
31.9priority
CVE-2018-12465Remote Code Execution in Micro Focus Secure Messaging Gateway
Micro Focus · Secure Messaging GatewayPublic exploitCritical · 9.1
80.0%Top 0.39%
31.3priority
CVE-2020-11853Arbitrary code execution vulnerability on multiple Micro Focus products
Micro Focus · Operation Bridge ManagerPublic exploitHigh · 8.8
77.0%Top 0.45%
31.1priority