Micro Focus Known Exploited Vulnerabilities
Evidence-backed KEV intelligence for Micro Focus products — CISA KEV status, confidence, sensor telemetry, and virtual-patch availability.
Total KEVs
3
In CISA KEV
2
Beyond CISA KEV
1
Sensor Observed
0
Virtual Patch Available
0
Micro Focus KEVs Added by Year
3 Micro Focus KEVs added all time (primary attestation date).
Attested CVEs
| CVE | Product | Confidence | CISA KEV | Added |
|---|---|---|---|---|
|
CVE-2020-11854
Arbitrary code execution vlnerability in Operation bridge Manager, Application Performance Management and Operations Bridge (containerized) products. |
Application Performance Management, Operation Bridge (containerized), Operation Bridge Manager | High | Not in CISA | 15 Feb 2026 |
|
CVE-2021-22502
Remote Code execution vulnerability in Micro Focus Operation Bridge Reporter (OBR) product, affecting version 10.40. The vulnerability could be... |
Operation Bridge Reporter. | Confirmed | In CISA | 03 Nov 2021 |
|
CVE-2021-22506
Advance configuration exposing Information Leakage vulnerability in Micro Focus Access Manager product, affects all versions prior to version 5.0.... |
Access Manager. | Confirmed | In CISA | 03 Nov 2021 |
Common Vulnerability Classes (CWE)
- CWE-78 — Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') 1
- CWE-798 — Use of Hard-coded Credentials 1
Browse all known exploited vulnerabilities · What is a known exploited vulnerability? · Methodology