Patchfirst: Micro Focus vulnerabilitieshttps://patchfirst.co/vendor/micro-focus/New and newly exploited Micro Focus CVEs, with CISA KEV, EPSS and ATT&CK context. Newest 50 by publication or KEV listing.en-gb360Sat, 31 Oct 2026 05:11:25 GMT[KEV] CVE-2021-22502: Micro Focus Operation Bridge Report (OBR) Remote Code Execution Vulnerabilityhttps://patchfirst.co/cve/CVE-2021-22502/CVE-2021-22502#kevWed, 03 Nov 2021 00:00:00 GMTMicro Focus · Operation Bridge Reporter (OBR). In CISA KEV since 2021-11-03. ENISA EUVD lists it as exploited. EPSS 96.7% (higher than 99.89% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter. Priority 69.8 of 100.kevpublic-exploitT1190T1059[KEV] CVE-2021-22506: Micro Focus Access Manager Information Leakage Vulnerabilityhttps://patchfirst.co/cve/CVE-2021-22506/CVE-2021-22506#kevWed, 03 Nov 2021 00:00:00 GMTMicro Focus · Micro Focus Access Manager. In CISA KEV since 2021-11-03. ENISA EUVD lists it as exploited. EPSS 25.7% (higher than 98% of CVEs). CVSS 7.5 HIGH. ATT&CK: T1190 Exploit Public-Facing Application; T1005 Data from Local System. Priority 62.8 of 100.kevT1190T1005CVE-2020-11854: Arbitrary code execution vlnerability in Operation bridge Manager, Application Performance Management and Operations…https://patchfirst.co/cve/CVE-2020-11854/CVE-2020-11854Tue, 27 Oct 2020 00:00:00 GMTMicro Focus · Application Performance Management. Not in CISA KEV. EPSS 74.4% (higher than 99.49% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. Priority 67.4 of 100.public-exploitCVE-2020-11853: Arbitrary code execution vulnerability on multiple Micro Focus productshttps://patchfirst.co/cve/CVE-2020-11853/CVE-2020-11853Thu, 22 Oct 2020 00:00:00 GMTMicro Focus · Operation Bridge Manager. Not in CISA KEV. EPSS 77.0% (higher than 99.55% of CVEs). CVSS 8.8 HIGH. Public exploit code exists. Priority 31.1 of 100.public-exploitCVE-2018-12464: Unauthenticated SQL injection in Micro Focus Secure Messaging Gatewayhttps://patchfirst.co/cve/CVE-2018-12464/CVE-2018-12464Fri, 29 Jun 2018 00:00:00 GMTMicro Focus · Secure Messaging Gateway. Not in CISA KEV. EPSS 80.7% (higher than 99.63% of CVEs). CVSS 10.0 CRITICAL. Public exploit code exists. Priority 31.9 of 100.public-exploitCVE-2018-12465: Remote Code Execution in Micro Focus Secure Messaging Gatewayhttps://patchfirst.co/cve/CVE-2018-12465/CVE-2018-12465Fri, 29 Jun 2018 00:00:00 GMTMicro Focus · Secure Messaging Gateway. Not in CISA KEV. EPSS 80.0% (higher than 99.61% of CVEs). CVSS 9.1 CRITICAL. Public exploit code exists. Priority 31.3 of 100.public-exploit