CVE-2021-22502

Micro Focus Operation Bridge Report (OBR) Remote Code Execution Vulnerability

9.8
CVSS 3.1
96.7 %
EPSS (current)
2021-11-03
KEV addition
No
Ransomware

Timeline

Publication, first public exploit and KEV addition on a day axis.

Key facts

Vendor / product: Micro Focus / Operation Bridge Reporter (OBR)

Published: 2021-02-08 · Due (CISA): 2021-11-17

CWE: CWE-78 · EU list: no

Exploit references (metadata only)

SourceReferenceTitleDate
nucleihttp/cves/2021/CVE-2021-22502.yamlMicro Focus Operations Bridge Reporter - Remote Code Execution–
metasploitexploit/linux/http/microfocus_obr_cmd_injectionexploit/linux/http/microfocus_obr_cmd_injection2021-02-09

References only — no downloads or instructions.

Sources