ACTIVELY EXPLOITED
CVE-2021-22502: Micro Focus Operation Bridge Report (OBR) Remote Code Execution Vulnerability
| Vendor | Micro Focus |
|---|---|
| Product | Operation Bridge Reporter (OBR) |
| Actively exploited | Yes |
| Added to CISA KEV | 3 Nov 2021 |
| CISA federal deadline | 17 Nov 2021 |
| Weakness (CWE) | CWE-20, CWE-78 |
Required action (CISA's text)
Apply updates per vendor instructions.
Description (NVD)
Micro Focus Operation Bridge Report (OBR) contains an unspecified vulnerability that allows for remote code execution.
SOURCES
Data from NVD, CISA KEV, FIRST EPSS and vendor advisories. Updated 10 Nov 2026.