CVE-2020-11856

9.8 criticalEPSS 5.2%

Critical (9.8) in microfocus operation bridge reporter. EPSS 5.2% chance of exploitation in the next 30 days.

Arbitrary code execution vulnerability on Micro Focus Operation Bridge Reporter, affecting version 10.40 and earlier. The vulnerability could allow remote attackers to execute arbitrary code on affected installations of OBR.

Severity

CVSS 3.1

9.8 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 5.2% chance of exploitation in the next 30 days; higher than 92% of CVEs (scores of 2026-10-31)
CWE: CWE-306
Published: 2020-09-22
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

microfocus:operation_bridge_reporter

References

https://softwaresupport.softwaregrp.com/doc/KM03710590
https://www.zerodayinitiative.com/advisories/ZDI-20-1216/
https://softwaresupport.softwaregrp.com/doc/KM03710590
https://www.zerodayinitiative.com/advisories/ZDI-20-1216/

Check your stack JSON