Microfocus Operations Agent — known CVE vulnerabilities

Every CVE whose affected-product data names Microfocus Operations Agent, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (7)

• CVE-2021-22505 — CVSS 9.8 (critical): Escalation of privileges vulnerability in Micro Focus Operations Agent, affects versions 12.0x, 12.10, 12.11, 12.12, 12.14 and 12.15. The…
• CVE-2024-0622 — CVSS 8.8 (high): Local privilege escalation vulnerability affects OpenText Operations Agent product versions 12.15 and 12.20-12.25 when installed on…
• CVE-2026-2123 — CVSS 7.8 (high): A security audit identified a privilege escalation vulnerability in Operations Agent(<=OA 12.29) on Windows. Under specific conditions…
• CVE-2020-11861 — CVSS 7.8 (high): Unauthorized escalation of local privileges vulnerability on Micro Focus Operation Agent, affecting all versions prior to versions 12.11…
• CVE-2019-17085 — CVSS 6.5 (medium): XXE attack vulnerability on Micro Focus Operations Agent, affected version 12.0, 12.01, 12.02, 12.03, 12.04, 12.05, 12.06, 12.10, 12.11…
• CVE-2024-5532 — CVSS 4.8 (medium): Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in OpenText™ Operations Agent…
• CVE-2021-38129 — CVSS 3.3 (low): Escalation of privileges vulnerability in Micro Focus in Micro Focus Operations Agent, affecting versions 12.x up to and including 12.21…