CVE-2022-38754

A potential vulnerability has been identified in Micro Focus Operations Bridge - Containerized. The vulnerability could be exploited by a malicious authenticated OBM (Operations Bridge Manager) user to run Java Scripts in the browser context of another OBM user. Please note: The vulnerability is only applicable if the Operations Bridge Manager capability is deployed. A potential vulnerability has been identified in Micro Focus Operations Bridge Manager (OBM). The vulnerability could be exploited by a malicious authenticated OBM user to run Java Scripts in the browser context of another OBM user. This issue affects: Micro Focus Micro Focus Operations Bridge Manager versions prior to 2022.11. Micro Focus Micro Focus Operations Bridge- Containerized versions prior to 2022.11.

• CWE-79
• CWE-79

• https://marketplace.microfocus.com/itom/content/operations-bridge-manager-obm-2022-05-hotfixes
• https://portal.microfocus.com/s/article/KM000012517?language=en_US
• https://portal.microfocus.com/s/article/KM000012518?language=en_US
• https://marketplace.microfocus.com/itom/content/operations-bridge-manager-obm-2022-05-hotfixes
• https://portal.microfocus.com/s/article/KM000012517?language=en_US
• https://portal.microfocus.com/s/article/KM000012518?language=en_US

Published

Dec 8, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-38749Using snakeYAML to parse untrusted YAML files may be vulnera…6.5
• CVE-2022-3875A vulnerability classified as critical was found in Click St…7.5
• CVE-2022-38750Using snakeYAML to parse untrusted YAML files may be vulnera…5.5
• CVE-2022-38751Using snakeYAML to parse untrusted YAML files may be vulnera…6.5
• CVE-2022-38752Using snakeYAML to parse untrusted YAML files may be vulnera…6.5
• CVE-2022-38753This update resolves a multi-factor authentication bypass at…6.3
• CVE-2022-38755A vulnerability has been identified in Micro Focus Filr in v…5.3
• CVE-2022-38756A vulnerability has been identified in Micro Focus GroupWise…4.3
• CVE-2022-38757A vulnerability has been identified in Micro Focus ZENworks …7.2
• CVE-2022-38758Cross-site Scripting (XSS) vulnerability in NetIQ iManager p…6.1
• CVE-2022-3876A vulnerability, which was classified as problematic, has be…6.5
• CVE-2022-38764A vulnerability on Trend Micro HouseCall version 1.62.1.1133…7.8