{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-03T11:02:14.430Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://portal.microfocus.com/s/article/KM000012517?language=en_US",
               },
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://portal.microfocus.com/s/article/KM000012518?language=en_US",
               },
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://marketplace.microfocus.com/itom/content/operations-bridge-manager-obm-2022-05-hotfixes",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "Micro Focus Operations Bridge Manager",
               vendor: "Micro Focus",
               versions: [
                  {
                     lessThan: "2022.11",
                     status: "affected",
                     version: "unspecified",
                     versionType: "custom",
                  },
               ],
            },
            {
               product: "Micro Focus Operations Bridge- Containerized",
               vendor: "Micro Focus",
               versions: [
                  {
                     lessThan: "2022.11",
                     status: "affected",
                     version: "unspecified",
                     versionType: "custom",
                  },
               ],
            },
         ],
         credits: [
            {
               lang: "en",
               value: "Micro Focus would like to thank Adam Silviu for discovering and reporting the vulnerability.",
            },
         ],
         descriptions: [
            {
               lang: "en",
               value: "A potential vulnerability has been identified in Micro Focus Operations Bridge - Containerized. The vulnerability could be exploited by a malicious authenticated OBM (Operations Bridge Manager) user to run Java Scripts in the browser context of another OBM user. Please note: The vulnerability is only applicable if the Operations Bridge Manager capability is deployed. A potential vulnerability has been identified in Micro Focus Operations Bridge Manager (OBM). The vulnerability could be exploited by a malicious authenticated OBM user to run Java Scripts in the browser context of another OBM user. This issue affects: Micro Focus Micro Focus Operations Bridge Manager versions prior to 2022.11. Micro Focus Micro Focus Operations Bridge- Containerized versions prior to 2022.11.",
            },
         ],
         metrics: [
            {
               cvssV3_1: {
                  attackComplexity: "LOW",
                  attackVector: "NETWORK",
                  availabilityImpact: "HIGH",
                  baseScore: 8,
                  baseSeverity: "HIGH",
                  confidentialityImpact: "HIGH",
                  integrityImpact: "HIGH",
                  privilegesRequired: "LOW",
                  scope: "UNCHANGED",
                  userInteraction: "REQUIRED",
                  vectorString: "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
                  version: "3.1",
               },
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     cweId: "CWE-79",
                     description: "CWE-79 Cross-site Scripting (XSS)",
                     lang: "en",
                     type: "CWE",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2022-12-08T00:00:00",
            orgId: "f81092c5-7f14-476d-80dc-24857f90be84",
            shortName: "microfocus",
         },
         references: [
            {
               url: "https://portal.microfocus.com/s/article/KM000012517?language=en_US",
            },
            {
               url: "https://portal.microfocus.com/s/article/KM000012518?language=en_US",
            },
            {
               url: "https://marketplace.microfocus.com/itom/content/operations-bridge-manager-obm-2022-05-hotfixes",
            },
         ],
         solutions: [
            {
               lang: "en",
               value: "Micro Focus has made the following mitigation information available to resolve the vulnerability for the impacted versions of Micro Focus Operations Bridge - Containerized:\nFor releases older than Micro Focus Operations Bridge - Containerized 2022.11: Upgrade to Micro Focus Operations Bridge - Containerized 2022.11\n\nMicro Focus has made the following mitigation information available to resolve the vulnerability for the impacted versions of Micro Focus Operations Bridge Manager:\nFor releases older than Micro Focus Operations Bridge Manager 2022.05: Upgrade to Micro Focus Operations Manager 2022.11\nFor Micro Focus Operations Bridge Manager 2022.05: Install OBM_2022.05_Consolidated_Hotfix_Nov_2022 or later.",
            },
         ],
         source: {
            discovery: "EXTERNAL",
         },
         title: "CVE-2022-38754 - Micro Focus Operations Bridge Manager and OpsBridge Containerized - Cross Site Scripting (XSS)",
         x_generator: {
            engine: "Vulnogram 0.0.9",
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "f81092c5-7f14-476d-80dc-24857f90be84",
      assignerShortName: "microfocus",
      cveId: "CVE-2022-38754",
      datePublished: "2022-12-08T00:00:00",
      dateReserved: "2022-08-25T00:00:00",
      dateUpdated: "2024-08-03T11:02:14.430Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}