CVE-2021-21975
VMware Server Side Request Forgery in vRealize Operations Manager API
CVSS
—
No CVSS
EPSS
78.3%
p100
KEV
YES
Jan 18, 2022
Exploit Today
80
0-100
Published: — · Last modified: —
Product
VMware / vRealize Operations Manager API
Vulnerability
VMware Server Side Request Forgery in vRealize Operations Manager API
Added to KEV
Jan 18, 2022
Remediate by
Feb 1, 2022
Known ransomware use
Yes
Summary description
Server Side Request Forgery (SSRF) in vRealize Operations Manager API prior to 8.4 may allow a malicious actor with network access to the vRealize Operations Manager API to perform a SSRF attack to steal administrative credentials.
Required action
Apply updates per vendor instructions.
Notes
https://nvd.nist.gov/vuln/detail/CVE-2021-21975
No related CVEs by CWE or product.