9.8
Critical
Exploited
· ransomware
CVE-2021-21975 VMware Server Side Request Forgery in vRealize Operations Manager API
Active exploitation observed
· CISA KEV catalogue
Required action
Apply updates per vendor instructions.
Ransomware campaigns
Known to be used
Weakness
CWE-918
Description
Server Side Request Forgery in vRealize Operations Manager API (CVE-2021-21975) prior to 8.4 may allow a malicious actor with network access to the vRealize Operations Manager API can perform a Server Side Request Forgery attack to steal administrative credentials.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| VMware vRealize Operations | Versions not published |
References
- www.vmware.com www.vmware.com
- packetstormsecurity.com packetstormsecurity.com
Timeline
- Published
- Added to the KEV catalogue
- Last modified
Other CVEs of VMware vRealize Operations
The 13 CVEs of VMware vRealize Operations →
CVE-2022-31673
VMware vRealize Operations contains an information disclosure vulnerability
8.8
High
CVE-2022-31674
VMware vRealize Operations contains an information disclosure vulnerability
4.3
Medium
CVE-2022-31675
VMware vRealize Operations contains an authentication bypass vulnerability
Not rated
CVE-2022-31672
VMware vRealize Operations contains a privilege escalation vulnerability
6.4
Medium