Skip to content
OpenAdvisories
High · 8.0 CVE-2022-38754 EUVD-2022-41317GHSA-cfjr-rrx2-8rp9

CVE-2022-38754 - Micro Focus Operations Bridge Manager and OpsBridge Containerized - Cross Site Scripting (XSS)

Published Dec 8, 2022 · Updated Apr 23, 2025 · Assigned by microfocus

Description

A potential vulnerability has been identified in Micro Focus Operations Bridge - Containerized. The vulnerability could be exploited by a malicious authenticated OBM (Operations Bridge Manager) user to run Java Scripts in the browser context of another OBM user. Please note: The vulnerability is only applicable if the Operations Bridge Manager capability is deployed. A potential vulnerability has been identified in Micro Focus Operations Bridge Manager (OBM). The vulnerability could be exploited by a malicious authenticated OBM user to run Java Scripts in the browser context of another OBM user. This issue affects: Micro Focus Micro Focus Operations Bridge Manager versions prior to 2022.11. Micro Focus Micro Focus Operations Bridge- Containerized versions prior to 2022.11.

Affected products

VendorProductAffectedFixed
Micro Focus Micro Focus Operations Bridge Manager unspecified – < 2022.11 2022.11
Micro Focus Micro Focus Operations Bridge- Containerized unspecified – < 2022.11 2022.11

Advisories 1

References