Service Management Automation Vulnerabilities (3 CVEs)

CVE-2020-11844 CRITICAL Act Now

Incorrect Authorization vulnerability in Micro Focus Container Deployment Foundation component affects products: - Hybrid Cloud Management. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Authentication Bypass Service Management Automation

NVD

CVSS 3.1

9.8

EPSS

2.0%

CVE-2018-6499 CRITICAL Act Now

Remote Code Execution in the following products Hybrid Cloud Management Containerized Suite HCM2017.11, HCM2018.02, HCM2018.05, Operations Bridge Containerized Suite 2017.11, 2018.02, 2018.05, Data. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Code Injection RCE Data Center Automation Hybrid Cloud Management Network Operations Management +5

NVD

CVSS 3.0

9.8

EPSS

2.4%

CVE-2018-6498 CRITICAL Act Now

Remote Code Execution in the following products Hybrid Cloud Management Containerized Suite HCM2017.11, HCM2018.02, HCM2018.05, Operations Bridge Containerized Suite 2017.11, 2018.02, 2018.05, Data. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Code Injection RCE Data Center Automation Hybrid Cloud Management Network Operations Management +2

NVD

CVSS 3.0

9.8

EPSS

3.1%

Service Management Automation

Monthly