CVE-2021-21975

2021-03-3117:51:51

vmware

www.cve.org

server side request forgery

vrealize operations manager

cve-2021-21975

network access

administrative credentials

EPSS

0.973

Percentile

99.9%

JSON

Server Side Request Forgery in vRealize Operations Manager API (CVE-2021-21975) prior to 8.4 may allow a malicious actor with network access to the vRealize Operations Manager API can perform a Server Side Request Forgery attack to steal administrative credentials.

CNA Affected

[
  {
    "product": "VMware vRealize Operations",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "VMware vRealize Operations prior to 8.4"
      }
    ]
  }
]