Service Management Automation Vulnerabilities (3 CVEs)

CVE-2020-11844 May 29, 22:15 CRITICAL Act Now

Incorrect Authorization vulnerability in Micro Focus Container Deployment Foundation component affects products: - Hybrid Cloud Management. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Authentication Bypass Service Management Automation Microfocus

NVD

CVSS 3.1

9.8

EPSS

2.0%

CVE-2018-6499 Aug 30, 21:29 CRITICAL Act Now

Remote Code Execution in the following products Hybrid Cloud Management Containerized Suite HCM2017.11, HCM2018.02, HCM2018.05, Operations Bridge Containerized Suite 2017.11, 2018.02, 2018.05, Data. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

RCE Code Injection Unified Functional Testing Service Virtualization Network Virtualization +6

NVD

CVSS 3.0

9.8

EPSS

2.4%

CVE-2018-6498 Aug 30, 21:29 CRITICAL Act Now

Remote Code Execution in the following products Hybrid Cloud Management Containerized Suite HCM2017.11, HCM2018.02, HCM2018.05, Operations Bridge Containerized Suite 2017.11, 2018.02, 2018.05, Data. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

RCE Code Injection Data Center Automation Hybrid Cloud Management Network Operations Management +3

NVD

CVSS 3.0

9.8

EPSS

3.1%

Service Management Automation

Monthly