{"id":"CVE-2021-22504","aliases":["EUVD-2021-9650","GHSA-r8mr-9747-24q8"],"status":"published","title":"Arbitrary code execution vulnerability on Micro Focus Operations Bridge Manager product,...","description":"Arbitrary code execution vulnerability on Micro Focus Operations Bridge Manager product, affecting versions 10.1x, 10.6x, 2018.05, 2018.11, 2019.05, 2019.11, 2020.05, 2020.10. The vulnerability could allow remote attackers to execute arbitrary code on an OBM server.","severity":{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.03604,"percentile":0.8955,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"published":"2021-02-12T19:42:59Z","modified":"2026-06-17T03:37:20Z","products":[{"vendor":"microfocus","product":"operations_bridge_manager"}],"references":[{"url":"https://softwaresupport.softwaregrp.com/doc/KM03777855","tags":["x_refsource_MISC","x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-22504"},{"url":"https://github.com/advisories/GHSA-r8mr-9747-24q8"}],"sources":{"cve":[{"id":"CVE-2021-22504","description":"Arbitrary code execution vulnerability on Micro Focus Operations Bridge Manager product, affecting versions 10.1x, 10.6x, 2018.05, 2018.11, 2019.05, 2019.11, 2020.05, 2020.10. The vulnerability could allow remote attackers to execute arbitrary code on an OBM server.","status":"published","published":"2021-02-12T19:42:59Z","modified":"2024-08-03T18:44:14.02Z","updated_at":"2026-11-02T14:32:57.701381Z"}],"euvd":[{"id":"EUVD-2021-9650","description":"Arbitrary code execution vulnerability on Micro Focus Operations Bridge Manager product, affecting versions 10.1x, 10.6x, 2018.05, 2018.11, 2019.05, 2019.11, 2020.05, 2020.10. The vulnerability could allow remote attackers to execute arbitrary code on an OBM server.","status":"published","published":"2021-02-12T19:42:59Z","modified":"2024-08-03T18:44:14Z","updated_at":"2026-11-03T03:25:02.042856Z"}],"ghsa":[{"id":"GHSA-r8mr-9747-24q8","title":"Arbitrary code execution vulnerability on Micro Focus Operations Bridge Manager product,...","description":"Arbitrary code execution vulnerability on Micro Focus Operations Bridge Manager product, affecting versions 10.1x, 10.6x, 2018.05, 2018.11, 2019.05, 2019.11, 2020.05, 2020.10. The vulnerability could allow remote attackers to execute arbitrary code on an OBM server.","status":"published","published":"2022-05-24T17:42:05Z","modified":"2023-01-29T05:05:21Z","updated_at":"2026-11-02T14:45:46.414099Z"}],"nvd":[{"id":"CVE-2021-22504","description":"Arbitrary code execution vulnerability on Micro Focus Operations Bridge Manager product, affecting versions 10.1x, 10.6x, 2018.05, 2018.11, 2019.05, 2019.11, 2020.05, 2020.10. The vulnerability could allow remote attackers to execute arbitrary code on an OBM server.","status":"published","published":"2021-02-12T20:15:13.58Z","modified":"2026-06-17T03:37:20.643Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary"},{"version":"2.0","score":10,"vector":"AV:N/AC:L/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary"}],"updated_at":"2026-11-02T14:06:50.031227Z"}]}}