{"cve":{"cve_id":"CVE-2020-11844","is_kev":false,"kev_date_added":null,"kev_vendor_project":null,"kev_product":null,"kev_vulnerability_name":null,"kev_short_description":null,"kev_required_action":null,"kev_due_date":null,"kev_known_ransomware":null,"kev_notes":null,"kev_cwes":null,"epss_score":0.02007,"epss_percentile":0.78289,"epss_as_of":"2026-06-23","description":"Incorrect Authorization vulnerability in Micro Focus Container Deployment Foundation component affects products: - Hybrid Cloud Management. Versions 2018.05 to 2019.11. - ArcSight Investigate. versions 2.4.0, 3.0.0 and 3.1.0. - ArcSight Transformation Hub. versions 3.0.0, 3.1.0, 3.2.0. - ArcSight Interset. version 6.0.0. - ArcSight ESM (when ArcSight Fusion 1.0 is installed). version 7.2.1. - Service Management Automation (SMA). versions 2018.05 to 2020.02 - Operation Bridge Suite (Containerized). Versions 2018.05 to 2020.02. - Network Operation Management. versions 2017.11 to 2019.11. - Data Center Automation Containerized. versions 2018.05 to 2019.11 - Identity Intelligence. versions 1.1.0 and 1.1.1. The vulnerability could be exploited to provide unauthorized access to the Container Deployment Foundation.","published_at":"2020-05-29T21:15:23Z","last_modified_at":null,"cvss_v3_score":10.0,"cvss_v3_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","cvss_v3_severity":"CRITICAL","cvss_v4_score":null,"cvss_v4_vector":null,"cvss_v4_severity":null,"ssvc_decision":null,"ssvc_exploitation":null,"ssvc_automatable":null,"ssvc_technical_impact":null,"cwes":["CWE-863"],"nvd_references":["https://softwaresupport.softwaregrp.com/doc/KM03645636","https://softwaresupport.softwaregrp.com/doc/KM03645642","https://softwaresupport.softwaregrp.com/doc/KM03645631","https://softwaresupport.softwaregrp.com/doc/KM03645630","https://softwaresupport.softwaregrp.com/doc/KM03645629","https://softwaresupport.softwaregrp.com/doc/KM03645628","https://support.microfocus.com/kb/doc.php?id=7024637"],"vuln_status":null,"trending_score":null,"is_trending":false,"has_trended":false,"trended_number_one":false,"trending_peak_score":null,"trending_peak_rank":null,"started_trending_at":null,"trended_number_one_at":null,"summary_generated":null,"summary_generated_at":null,"summary_model":null,"created_at":"2026-06-24T00:09:39.878444Z","updated_at":"2026-06-28T23:13:20.710940Z"},"effective_severity":"CRITICAL","badges":[],"impact_analysis":[],"cvss_v3_decoded":{"version":"3.1","metrics":[{"metric":"AV","name":"Attack Vector","value":"N","value_label":"Network"},{"metric":"AC","name":"Attack Complexity","value":"L","value_label":"Low"},{"metric":"PR","name":"Privileges Required","value":"N","value_label":"None"},{"metric":"UI","name":"User Interaction","value":"N","value_label":"None"},{"metric":"S","name":"Scope","value":"C","value_label":"Changed"},{"metric":"C","name":"Confidentiality","value":"H","value_label":"High"},{"metric":"I","name":"Integrity","value":"H","value_label":"High"},{"metric":"A","name":"Availability","value":"H","value_label":"High"}]},"cvss_v4_decoded":{"version":null,"metrics":[]},"affected":[{"vendor_slug":"micro-focus","vendor_name":"Micro Focus","product_slug":"arcsight-esm-when-arcsight-fusion","product_name":"ArcSight ESM (when ArcSight Fusion","version_start":"7.2.1","version_start_inclusive":true,"version_end":"7.2.1","version_end_inclusive":true,"cpe23_uri":"cve5:micro-focus:arcsight-esm-when-arcsight-fusion:7.2.1:7.2.1"},{"vendor_slug":"micro-focus","vendor_name":"Micro Focus","product_slug":"arcsight-interset","product_name":"ArcSight Interset","version_start":"6.0.0","version_start_inclusive":true,"version_end":"6.0.0","version_end_inclusive":true,"cpe23_uri":"cve5:micro-focus:arcsight-interset:6.0.0:6.0.0"},{"vendor_slug":"micro-focus","vendor_name":"Micro Focus","product_slug":"arcsight-investigate.-versions","product_name":"ArcSight Investigate. versions","version_start":"2.4.0","version_start_inclusive":true,"version_end":"2.4.0","version_end_inclusive":true,"cpe23_uri":"cve5:micro-focus:arcsight-investigate.-versions:2.4.0:2.4.0"},{"vendor_slug":"micro-focus","vendor_name":"Micro Focus","product_slug":"arcsight-investigate.-versions","product_name":"ArcSight Investigate. versions","version_start":"3.1.0","version_start_inclusive":true,"version_end":"3.1.0","version_end_inclusive":true,"cpe23_uri":"cve5:micro-focus:arcsight-investigate.-versions:3.1.0:3.1.0"},{"vendor_slug":"micro-focus","vendor_name":"Micro Focus","product_slug":"arcsight-investigate.-versions","product_name":"ArcSight Investigate. versions","version_start":"3.0.0","version_start_inclusive":true,"version_end":"3.0.0","version_end_inclusive":true,"cpe23_uri":"cve5:micro-focus:arcsight-investigate.-versions:3.0.0:3.0.0"},{"vendor_slug":"micro-focus","vendor_name":"Micro Focus","product_slug":"arcsight-transformation-hub","product_name":"ArcSight Transformation Hub","version_start":"3.2.0","version_start_inclusive":true,"version_end":"3.2.0","version_end_inclusive":true,"cpe23_uri":"cve5:micro-focus:arcsight-transformation-hub:3.2.0:3.2.0"},{"vendor_slug":"micro-focus","vendor_name":"Micro Focus","product_slug":"arcsight-transformation-hub","product_name":"ArcSight Transformation Hub","version_start":"3.1.0","version_start_inclusive":true,"version_end":"3.1.0","version_end_inclusive":true,"cpe23_uri":"cve5:micro-focus:arcsight-transformation-hub:3.1.0:3.1.0"},{"vendor_slug":"micro-focus","vendor_name":"Micro Focus","product_slug":"arcsight-transformation-hub","product_name":"ArcSight Transformation Hub","version_start":"3.0.0","version_start_inclusive":true,"version_end":"3.0.0","version_end_inclusive":true,"cpe23_uri":"cve5:micro-focus:arcsight-transformation-hub:3.0.0:3.0.0"},{"vendor_slug":"micro-focus","vendor_name":"Micro Focus","product_slug":"data-center-automation-containerized","product_name":"Data Center Automation Containerized","version_start":"2018.05","version_start_inclusive":true,"version_end":"2018.05","version_end_inclusive":true,"cpe23_uri":"cve5:micro-focus:data-center-automation-containerized:2018.05:2018.05"},{"vendor_slug":"micro-focus","vendor_name":"Micro Focus","product_slug":"data-center-automation-containerized","product_name":"Data Center Automation Containerized","version_start":"2019.11","version_start_inclusive":true,"version_end":"2019.11","version_end_inclusive":true,"cpe23_uri":"cve5:micro-focus:data-center-automation-containerized:2019.11:2019.11"},{"vendor_slug":"micro-focus","vendor_name":"Micro Focus","product_slug":"data-center-automation-containerized","product_name":"Data Center Automation Containerized","version_start":"2019.08","version_start_inclusive":true,"version_end":"2019.08","version_end_inclusive":true,"cpe23_uri":"cve5:micro-focus:data-center-automation-containerized:2019.08:2019.08"},{"vendor_slug":"micro-focus","vendor_name":"Micro Focus","product_slug":"data-center-automation-containerized","product_name":"Data Center Automation Containerized","version_start":"2019.05","version_start_inclusive":true,"version_end":"2019.05","version_end_inclusive":true,"cpe23_uri":"cve5:micro-focus:data-center-automation-containerized:2019.05:2019.05"},{"vendor_slug":"micro-focus","vendor_name":"Micro Focus","product_slug":"data-center-automation-containerized","product_name":"Data Center Automation Containerized","version_start":"2019.02","version_start_inclusive":true,"version_end":"2019.02","version_end_inclusive":true,"cpe23_uri":"cve5:micro-focus:data-center-automation-containerized:2019.02:2019.02"},{"vendor_slug":"micro-focus","vendor_name":"Micro Focus","product_slug":"data-center-automation-containerized","product_name":"Data Center Automation Containerized","version_start":"2018.11","version_start_inclusive":true,"version_end":"2018.11","version_end_inclusive":true,"cpe23_uri":"cve5:micro-focus:data-center-automation-containerized:2018.11:2018.11"},{"vendor_slug":"micro-focus","vendor_name":"Micro Focus","product_slug":"data-center-automation-containerized","product_name":"Data Center Automation Containerized","version_start":"2018.08","version_start_inclusive":true,"version_end":"2018.08","version_end_inclusive":true,"cpe23_uri":"cve5:micro-focus:data-center-automation-containerized:2018.08:2018.08"},{"vendor_slug":"micro-focus","vendor_name":"Micro Focus","product_slug":"hybrid-cloud-management","product_name":"Hybrid Cloud Management","version_start":"2018.05","version_start_inclusive":true,"version_end":"2019.11","version_end_inclusive":false,"cpe23_uri":"cve5:micro-focus:hybrid-cloud-management:2018.05:2019.11"},{"vendor_slug":"micro-focus","vendor_name":"Micro Focus","product_slug":"identity-intelligence.-versions","product_name":"Identity Intelligence. versions","version_start":"next of 1.1.1","version_start_inclusive":true,"version_end":"unspecified","version_end_inclusive":false,"cpe23_uri":"cve5:micro-focus:identity-intelligence.-versions:next of 1.1.1:unspecified"},{"vendor_slug":"micro-focus","vendor_name":"Micro Focus","product_slug":"identity-intelligence.-versions","product_name":"Identity Intelligence. versions","version_start":"1.1.0","version_start_inclusive":true,"version_end":"1.1.0","version_end_inclusive":true,"cpe23_uri":"cve5:micro-focus:identity-intelligence.-versions:1.1.0:1.1.0"},{"vendor_slug":"micro-focus","vendor_name":"Micro Focus","product_slug":"network-operation-management","product_name":"Network Operation Management","version_start":"2017.11","version_start_inclusive":true,"version_end":"2019.11","version_end_inclusive":true,"cpe23_uri":"cve5:micro-focus:network-operation-management:2017.11:2019.11"},{"vendor_slug":"micro-focus","vendor_name":"Micro Focus","product_slug":"operation-bridge-suite-containerized","product_name":"Operation Bridge Suite (Containerized)","version_start":"2018.05","version_start_inclusive":true,"version_end":"2018.05","version_end_inclusive":true,"cpe23_uri":"cve5:micro-focus:operation-bridge-suite-containerized:2018.05:2018.05"},{"vendor_slug":"micro-focus","vendor_name":"Micro Focus","product_slug":"operation-bridge-suite-containerized","product_name":"Operation Bridge Suite (Containerized)","version_start":"2018.08","version_start_inclusive":true,"version_end":"2018.08","version_end_inclusive":true,"cpe23_uri":"cve5:micro-focus:operation-bridge-suite-containerized:2018.08:2018.08"},{"vendor_slug":"micro-focus","vendor_name":"Micro Focus","product_slug":"operation-bridge-suite-containerized","product_name":"Operation Bridge Suite (Containerized)","version_start":"2019.11","version_start_inclusive":true,"version_end":"2019.11","version_end_inclusive":true,"cpe23_uri":"cve5:micro-focus:operation-bridge-suite-containerized:2019.11:2019.11"},{"vendor_slug":"micro-focus","vendor_name":"Micro Focus","product_slug":"operation-bridge-suite-containerized","product_name":"Operation Bridge Suite (Containerized)","version_start":"2019.8","version_start_inclusive":true,"version_end":"2019.8","version_end_inclusive":true,"cpe23_uri":"cve5:micro-focus:operation-bridge-suite-containerized:2019.8:2019.8"},{"vendor_slug":"micro-focus","vendor_name":"Micro Focus","product_slug":"operation-bridge-suite-containerized","product_name":"Operation Bridge Suite (Containerized)","version_start":"2019.05","version_start_inclusive":true,"version_end":"2019.05","version_end_inclusive":true,"cpe23_uri":"cve5:micro-focus:operation-bridge-suite-containerized:2019.05:2019.05"},{"vendor_slug":"micro-focus","vendor_name":"Micro Focus","product_slug":"operation-bridge-suite-containerized","product_name":"Operation Bridge Suite (Containerized)","version_start":"2019.02","version_start_inclusive":true,"version_end":"2019.02","version_end_inclusive":true,"cpe23_uri":"cve5:micro-focus:operation-bridge-suite-containerized:2019.02:2019.02"},{"vendor_slug":"micro-focus","vendor_name":"Micro Focus","product_slug":"operation-bridge-suite-containerized","product_name":"Operation Bridge Suite (Containerized)","version_start":"2018.11","version_start_inclusive":true,"version_end":"2018.11","version_end_inclusive":true,"cpe23_uri":"cve5:micro-focus:operation-bridge-suite-containerized:2018.11:2018.11"},{"vendor_slug":"micro-focus","vendor_name":"Micro Focus","product_slug":"service-management-automation-sma","product_name":"Service Management Automation (SMA)","version_start":"2019.02","version_start_inclusive":true,"version_end":"2019.02","version_end_inclusive":true,"cpe23_uri":"cve5:micro-focus:service-management-automation-sma:2019.02:2019.02"},{"vendor_slug":"micro-focus","vendor_name":"Micro Focus","product_slug":"service-management-automation-sma","product_name":"Service Management Automation (SMA)","version_start":"2018.11","version_start_inclusive":true,"version_end":"2018.11","version_end_inclusive":true,"cpe23_uri":"cve5:micro-focus:service-management-automation-sma:2018.11:2018.11"},{"vendor_slug":"micro-focus","vendor_name":"Micro Focus","product_slug":"service-management-automation-sma","product_name":"Service Management Automation (SMA)","version_start":"2018.08","version_start_inclusive":true,"version_end":"2018.08","version_end_inclusive":true,"cpe23_uri":"cve5:micro-focus:service-management-automation-sma:2018.08:2018.08"},{"vendor_slug":"micro-focus","vendor_name":"Micro Focus","product_slug":"service-management-automation-sma","product_name":"Service Management Automation (SMA)","version_start":"2019.11","version_start_inclusive":true,"version_end":"2019.11","version_end_inclusive":true,"cpe23_uri":"cve5:micro-focus:service-management-automation-sma:2019.11:2019.11"},{"vendor_slug":"micro-focus","vendor_name":"Micro Focus","product_slug":"service-management-automation-sma","product_name":"Service Management Automation (SMA)","version_start":"2019.08","version_start_inclusive":true,"version_end":"2019.08","version_end_inclusive":true,"cpe23_uri":"cve5:micro-focus:service-management-automation-sma:2019.08:2019.08"},{"vendor_slug":"micro-focus","vendor_name":"Micro Focus","product_slug":"service-management-automation-sma","product_name":"Service Management Automation (SMA)","version_start":"2018.05","version_start_inclusive":true,"version_end":"2018.05","version_end_inclusive":true,"cpe23_uri":"cve5:micro-focus:service-management-automation-sma:2018.05:2018.05"},{"vendor_slug":"micro-focus","vendor_name":"Micro Focus","product_slug":"service-management-automation-sma","product_name":"Service Management Automation (SMA)","version_start":"2020.02","version_start_inclusive":true,"version_end":"2020.02","version_end_inclusive":true,"cpe23_uri":"cve5:micro-focus:service-management-automation-sma:2020.02:2020.02"},{"vendor_slug":"micro-focus","vendor_name":"Micro Focus","product_slug":"service-management-automation-sma","product_name":"Service Management Automation (SMA)","version_start":"2019.05","version_start_inclusive":true,"version_end":"2019.05","version_end_inclusive":true,"cpe23_uri":"cve5:micro-focus:service-management-automation-sma:2019.05:2019.05"}],"exploit_refs":[],"news":[],"references":[{"url":"https://softwaresupport.softwaregrp.com/doc/KM03645636","source_type":"MISC","tags":[]},{"url":"https://softwaresupport.softwaregrp.com/doc/KM03645642","source_type":"MISC","tags":[]},{"url":"https://softwaresupport.softwaregrp.com/doc/KM03645631","source_type":"MISC","tags":[]},{"url":"https://softwaresupport.softwaregrp.com/doc/KM03645630","source_type":"MISC","tags":[]},{"url":"https://softwaresupport.softwaregrp.com/doc/KM03645629","source_type":"MISC","tags":[]},{"url":"https://softwaresupport.softwaregrp.com/doc/KM03645628","source_type":"MISC","tags":[]},{"url":"https://support.microfocus.com/kb/doc.php?id=7024637","source_type":"MISC","tags":[]}],"timeline":[{"type":"published","at":"2020-05-29T21:15:23Z","label":"CVE published","source":null},{"type":"cvss_changed","at":"2026-06-28T17:02:06.718090Z","label":"CVSS score revised","source":"cvelistv5"},{"type":"cvss_changed","at":"2026-06-28T17:02:06.718090Z","label":"CVSS score revised","source":"cvelistv5"},{"type":"cvss_changed","at":"2026-06-28T17:02:06.718090Z","label":"CVSS score revised","source":"cvelistv5"}]}