Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2022-38754— CVE-2022-38754 - Micro Focus Operations Bridge Manager and OpsBridge Containerized - Cross Site Scripting (XSS)

Quick assessment

Affected
Micro Focus Micro Focus Operations Bridge Manager
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Micro Focus Operations Bridge Manager是英国Micro Focus公司的一个应用软件。提供一个监控功能。 Micro Focus Micro Focus Operations Bridge Manager 2022.11之前版本、Micro Focus Micro Focus Operations Bridge- Containerized 2022.11之前版本存在安全漏洞。攻击者利用该漏洞在另一个OBM用户的浏览器环境中运行Java脚本。

CVSS 8.0 · High EPSS 0.65% · P49

Possible ATT&CK Techniques 1 AI

T1059.007 · JavaScript
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2022-38754

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
CVE-2022-38754 - Micro Focus Operations Bridge Manager and OpsBridge Containerized - Cross Site Scripting (XSS)
Source: CVE Program / CVE List V5
Vulnerability Description
A potential vulnerability has been identified in Micro Focus Operations Bridge - Containerized. The vulnerability could be exploited by a malicious authenticated OBM (Operations Bridge Manager) user to run Java Scripts in the browser context of another OBM user. Please note: The vulnerability is only applicable if the Operations Bridge Manager capability is deployed. A potential vulnerability has been identified in Micro Focus Operations Bridge Manager (OBM). The vulnerability could be exploited by a malicious authenticated OBM user to run Java Scripts in the browser context of another OBM user. This issue affects: Micro Focus Micro Focus Operations Bridge Manager versions prior to 2022.11. Micro Focus Micro Focus Operations Bridge- Containerized versions prior to 2022.11.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
在Web页面生成时对输入的转义处理不恰当(跨站脚本)
Source: CVE Program / CVE List V5
Vulnerability Title
Micro Focus Operations Bridge Manager 跨站脚本漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Micro Focus Operations Bridge Manager是英国Micro Focus公司的一个应用软件。提供一个监控功能。 Micro Focus Micro Focus Operations Bridge Manager 2022.11之前版本、Micro Focus Micro Focus Operations Bridge- Containerized 2022.11之前版本存在安全漏洞。攻击者利用该漏洞在另一个OBM用户的浏览器环境中运行Java脚本。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor Product Affected Versions CPE Subscribe
Micro Focus Micro Focus Operations Bridge Manager unspecified ~ 2022.11 -
Micro Focus Micro Focus Operations Bridge- Containerized unspecified ~ 2022.11 -

II. Public POCs for CVE-2022-38754

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2022-38754

请登录查看更多情报信息。

Other References for CVE-2022-38754 (3)

IV. Related Vulnerabilities

Same vendor: Micro Focus
Same weakness: CWE-79

V. Comments for CVE-2022-38754

No comments yet

Leave a comment