CVE:CVE-2022-38754
CNNVD:CNNVD-202212-2732
Micro Focus Operations Bridge Manager是英国Micro Focus公司的一个应用软件。提供一个监控功能。
Micro Focus Micro Focus Operations Bridge Manager 2022.11之前版本、Micro Focus Micro Focus Operations Bridge- Containerized 2022.11之前版本存在安全漏洞。攻击者利用该漏洞在另一个OBM用户的浏览器环境中运行Java脚本。
solution:Upgrade microfocus operations_bridge to a higher version than 2022.11,and avoid the version (,2022.11); Upgrade microfocus operations_bridge_manager to a higher version than 2022.11,and avoid the version (,2022.11)