CVE-2022-38754: - Micro Focus Operations Bridge Manager and OpsBridge Containerized - Cross Site Scripting (XSS)
First published: Thu Dec 08 2022(Updated: )
A potential vulnerability has been identified in Micro Focus Operations Bridge - Containerized. The vulnerability could be exploited by a malicious authenticated OBM (Operations Bridge Manager) user to run Java Scripts in the browser context of another OBM user. Please note: The vulnerability is only applicable if the Operations Bridge Manager capability is deployed. A potential vulnerability has been identified in Micro Focus Operations Bridge Manager (OBM). The vulnerability could be exploited by a malicious authenticated OBM user to run Java Scripts in the browser context of another OBM user. This issue affects: Micro Focus Micro Focus Operations Bridge Manager versions prior to 2022.11. Micro Focus Micro Focus Operations Bridge- Containerized versions prior to 2022.11.
Credit: security@microfocus.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Micro Focus Operations Bridge Manager | <2022.11 | |
| Micro Focus Operations Bridge Manager | <2022.11 |
Remedy
Micro Focus has made the following mitigation information available to resolve the vulnerability for the impacted versions of Micro Focus Operations Bridge - Containerized: For releases older than Micro Focus Operations Bridge - Containerized 2022.11: Upgrade to Micro Focus Operations Bridge - Containerized 2022.11 Micro Focus has made the following mitigation information available to resolve the vulnerability for the impacted versions of Micro Focus Operations Bridge Manager: For releases older than Micro Focus Operations Bridge Manager 2022.05: Upgrade to Micro Focus Operations Manager 2022.11 For Micro Focus Operations Bridge Manager 2022.05: Install OBM_2022.05_Consolidated_Hotfix_Nov_2022 or later.
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID for this potential vulnerability in Micro Focus Operations Bridge - Containerized?
The vulnerability ID for this potential vulnerability is CVE-2022-38754.
What is the severity level of CVE-2022-38754?
The severity level of CVE-2022-38754 is high with a score of 5.4.
How can the vulnerability be exploited?
The vulnerability could be exploited by a malicious authenticated OBM (Operations Bridge Manager) user to run Java Scripts in the browser context of another OBM user.
Which software is affected by this vulnerability?
The Micro Focus Operations Bridge Manager with versions up to and exclusive of 2022.11 is affected by this vulnerability.
Is there a fix available for CVE-2022-38754?
Yes, hotfixes are available for this vulnerability. Please refer to the references for more information.
- collector/nvd-index
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/title
- agent/remedy
- agent/weakness
- agent/severity
- agent/author
- agent/references
- agent/tags
- agent/description
- agent/first-publish-date
- agent/event
- vendor/microfocus
- canonical/micro focus operations bridge manager