CVE-2021-22502

🔥 Known Exploited (CISA KEV)CRITICAL

9.8

CVSS Severity Score

EPSS Score50.7530%

EPSS Percentile89.89th

Published2021-02-08

Last Modified2025-10-27

Data SourcesNVDCISA KEVFIRST.org EPSS

Vulnerability Description

Remote Code execution vulnerability in Micro Focus Operation Bridge Reporter (OBR) product, affecting version 10.40. The vulnerability could be exploited to allow Remote Code Execution on the OBR server.

Affected Platforms (CPE)

📦

Microfocus

Operation Bridge Reporter

= 10.40

References & Advisories

🔗 http://packetstormsecurity.com/files/162408/Micro-Focus-Operations-Bridge-Reporter-Unauthenticated-Command-Injection.html

🔗 https://softwaresupport.softwaregrp.com/doc/KM03775947

🔗 https://www.zerodayinitiative.com/advisories/ZDI-21-153/

🔗 https://www.zerodayinitiative.com/advisories/ZDI-21-154/