Hybrid Cloud Management Vulnerabilities (3 CVEs)

CVE-2020-11853 Oct 22, 21:15 HIGH POC THREAT Act Now

Arbitrary code execution vulnerability affecting multiple Micro Focus products. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

RCE HP Universal Cmbd Foundation Application Performance Management Data Center Automation +5

NVD GitHub

CVSS 3.1

8.8

EPSS

77.0%

CVE-2018-6499 Aug 30, 21:29 CRITICAL Act Now

Remote Code Execution in the following products Hybrid Cloud Management Containerized Suite HCM2017.11, HCM2018.02, HCM2018.05, Operations Bridge Containerized Suite 2017.11, 2018.02, 2018.05, Data. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

RCE Code Injection Unified Functional Testing Service Virtualization Network Virtualization +6

NVD

CVSS 3.0

9.8

EPSS

2.4%

CVE-2018-6498 Aug 30, 21:29 CRITICAL Act Now

Remote Code Execution in the following products Hybrid Cloud Management Containerized Suite HCM2017.11, HCM2018.02, HCM2018.05, Operations Bridge Containerized Suite 2017.11, 2018.02, 2018.05, Data. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

RCE Code Injection Data Center Automation Hybrid Cloud Management Network Operations Management +3

NVD

CVSS 3.0

9.8

EPSS

3.1%

Hybrid Cloud Management

Monthly