{"id":"CVE-2020-11854","url":"https://www.cyber-defence.io/tools/cve/CVE-2020-11854","generatedAt":"2026-11-05T01:56:35.414Z","title":"Arbitrary code execution vlnerability in Operation bridge Manager, Application Performance Management and Operations Bridge (containerized) vulnerability in Micro Focus products products Operation Bridge Manager, Operation Bridge (containerized) and…","description":"Arbitrary code execution vlnerability in Operation bridge Manager, Application Performance Management and Operations Bridge (containerized) vulnerability in Micro Focus products products Operation Bridge Manager, Operation Bridge (containerized) and Application Performance Management. The vulneravility affects: 1.) Operation Bridge Manager versions 2020.05, 2019.11, 2019.05, 2018.11, 2018.05, 10.63,10.62, 10.61, 10.60, 10.12, 10.11, 10.10 and all earlier versions. 2.) Operations Bridge (containerized) 2020.05, 2019.08, 2019.05, 2018.11, 2018.08, 2018.05. 2018.02 and 2017.11. 3.) Application Performance Management versions 9,51, 9.50 and 9.40 with uCMDB 10.33 CUP 3. The vulnerability could allow Arbitrary code execution.","published":"2020-10-27T17:15:12.000Z","lastModified":"2026-06-17T02:50:55.000Z","status":"Modified","sourceIdentifier":"security@opentext.com","cvss":{"version":"3.1","score":9.8,"severity":"CRITICAL","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},"cwe":["CWE-798"],"affected":["microfocus/application performance management","microfocus/operations bridge","microfocus/operations bridge manager"],"epss":{"score":0.74449,"percentile":0.99494,"date":"2026-11-03","history":[]},"kev":{"listed":false},"exploits":{"count":0,"verified":false,"firstPublished":null,"source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[]},"verdict":{"level":"urgent","text":"EPSS puts the probability of exploitation in the next 30 days at 74.4%, higher than 99% of all known CVEs. Patch or mitigate before the next change window."},"changes":[],"references":[{"url":"http://packetstormsecurity.com/files/161182/Micro-Focus-UCMDB-Remote-Code-Execution.html","source":"security@opentext.com"},{"url":"https://softwaresupport.softwaregrp.com/doc/KM03747657","source":"security@opentext.com"},{"url":"https://softwaresupport.softwaregrp.com/doc/KM03747658","source":"security@opentext.com"},{"url":"https://softwaresupport.softwaregrp.com/doc/KM03747854","source":"security@opentext.com"},{"url":"https://www.zerodayinitiative.com/advisories/ZDI-20-1287/","source":"security@opentext.com"},{"url":"http://packetstormsecurity.com/files/161182/Micro-Focus-UCMDB-Remote-Code-Execution.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://softwaresupport.softwaregrp.com/doc/KM03747657","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://softwaresupport.softwaregrp.com/doc/KM03747658","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://softwaresupport.softwaregrp.com/doc/KM03747854","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.zerodayinitiative.com/advisories/ZDI-20-1287/","source":"af854a3a-2127-422b-91ae-364da2661108"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2020-11854","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}