CVE-2021-21983
Arbitrary file write vulnerability in vRealize Operations Manager API (CVE-2021-21983) prior to 8.4 may allow an authenticated malicious act
CVSS
6.5
Medium
EPSS
68.8%
p99
KEV
—
Exploit Today
30
0-100
Published: Mar 31, 2021 · Last modified: Aug 12, 2026
68.6%EPSS · 30 days68.8%
2026-09-222026-10-20
Arbitrary file write vulnerability in vRealize Operations Manager API (CVE-2021-21983) prior to 8.4 may allow an authenticated malicious actor with network access to the vRealize Operations Manager API can write files to arbitrary locations on the underlying photon operating system.
- packetstormsecurity.comhttp://packetstormsecurity.com/files/162349/VMware-vRealize-Operations-Manager-Server-Side-Request-Forgery-Code-Execution.html
- www.vmware.comhttps://www.vmware.com/security/advisories/VMSA-2021-0004.html
- packetstormsecurity.comhttp://packetstormsecurity.com/files/162349/VMware-vRealize-Operations-Manager-Server-Side-Request-Forgery-Code-Execution.html
- www.vmware.comhttps://www.vmware.com/security/advisories/VMSA-2021-0004.html
No related CVEs by CWE or product.