CVE-2024-21334

CVE-2024-21334 is an Open Management Infrastructure (OMI) remote code execution vulnerability affecting Microsoft System Center Operations Manager (SCOM) environments that use OMI. Public sources indicate OMI under SCOM versions 2019 and 2022 can be exploited remotely via unauthenticated requests...

CVE-2024-21330

CVE-2024-21330 describes an elevation-of-privilege vulnerability in Microsoft’s Open Management Infrastructure (OMI). Public sources indicate this affects OMI alongside related System Center/OMS components, allowing an attacker with local access to obtain elevated privileges. The impact is descri...

CVE-2022-29149

CVE-2022-29149 concerns Microsoft Open Management Infrastructure (OMI). The vulnerability affects the OMI package prior to 1.6.9-1 and enables local, privilege-escalation attacks (unauthenticated remote attacker can gain privileged access). The issue is due to a privilege-escalation flaw in OMI. ...

CVE-2022-33640

CVE-2022-33640 affects Microsoft System Center Operations Manager via Open Management Infrastructure (OMI). The connected docs identify an elevation of privilege vulnerability with a LOCAL attack vector, requiring LOW privileges and no user interaction (CVSSv3.1 base score 7.8, HIGH impact on con...

CVE-2021-1728

CVE-2021-1728 affects Microsoft System Center Operations Manager (SCOM) and is described as an Elevation of Privilege vulnerability. The CVE entry notes a high severity (CVSS v3.1 base 8.8) with a network attack vector, low privileges required, no user interaction, and impact to confidentiality, ...

CVE-2021-41352

CVE-2021-41352 corresponds to a SCOM information disclosure vulnerability affecting System Center Operations Manager 2012 R2, 2016 and 2019. The connected Nessus/NASL entry describes an information disclosure vulnerability in SCOM’s web-facing components, specifically an insecure direct object re...

CVE-2025-27743

CVE-2025-27743 — Microsoft System Center Elevation of Privilege . A local privilege-elevation vulnerability arises from an untrusted search path in System Center (DLL hijacking). This can enable an authorized local attacker to obtain higher privileges. Public details confirm the impact and that e...

CVE-2023-36043

CVE-2023-36043 corresponds to an Information Disclosure vulnerability in Microsoft Open Management Infrastructure (OMI), affecting Open Management Infrastructure within System Center Operations Manager. The entry is supported by multiple connected sources indicating an information disclosure risk...

CVE-2026-20967

CVE-2026-20967 affects Microsoft System Center Operations Manager. The issue is due to improper input validation, enabling an authorized attacker to elevate privileges over the network. The CVSSv3.1 vector indicates a network-based, low-attack-complexity with low privileges required and high impa...