Vulnerability in Microfocus Operations Bridge

CVE-2021-38125

Unauthenticated remote code execution in Micro Focus Operations Bridge containerized, affecting versions 2021.05, 2021.08, and newer versions of Micro Focus Operations Bridge containerized if the deployment was upgraded from 2021.05 or 2021.08. The vulnerability could be exploited to unauthenticated remote code execution.

Published · last modified .

CVSS v3 metric

CVSS v3 base score 9.8 (Critical). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H.

EPSS exploit prediction

EPSS: 0.020 (80.0th percentile), scored .

Low probability of exploitation in the next 30 days, but still tracked. 80th percentile — 80.0% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.

EPSS trend (30 days)EPSS over the last 30 days for CVE-2021-38125: held from 0.019 to 0.020.

EPSS over last 30 days · oldest: 0.019 · newest: 0.020 · change: +0.001

Affected products

  • Microfocus Operations Bridge — versions 2021.05
  • Operations Bridge Containerized. — versions 2021.05, 2021.08, and newer versions of Micro Focus Operations Bridge containerized if the deployment was upgraded from 2021.05 or 2021.08

References

Frequently asked questions

What is CVE-2021-38125?
CVE-2021-38125 is a critical-severity vulnerability in Microfocus Operations Bridge. CVSS score: 9.8/10. Published 2022-04-11.
How severe is CVE-2021-38125?
Critical severity. CVSS v3 base score is 9.8 out of 10.