{
    "id": "CVE-2021-22504",
    "published": "2021-02-12 20:15:13",
    "last_modified": "2026-06-17 03:37:20",
    "cvss_score": "9.8",
    "cvss_severity": "CRITICAL",
    "cvss_version": "3.1",
    "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
    "cwe": null,
    "description": "Arbitrary code execution vulnerability on Micro Focus Operations Bridge Manager product, affecting versions 10.1x, 10.6x, 2018.05, 2018.11, 2019.05, 2019.11, 2020.05, 2020.10. The vulnerability could allow remote attackers to execute arbitrary code on an OBM server.",
    "epss_score": "0.03455",
    "epss_percentile": "0.88710",
    "kev": 0,
    "kev_due": null,
    "has_exploit": 0,
    "updated_at": "2026-10-09 18:17:27",
    "priority": {
        "rank": 3,
        "label": "In your normal cycle",
        "why": "Critical by CVSS (9.8), but no sign of active exploitation."
    },
    "products": [
        {
            "vendor": "microfocus",
            "product": "operations_bridge_manager"
        }
    ],
    "kev_detail": null,
    "exploits": [],
    "refs_list": [
        "https://softwaresupport.softwaregrp.com/doc/KM03777855",
        "https://softwaresupport.softwaregrp.com/doc/KM03777855"
    ]
}