CVE-2021-21983
Arbitrary file write vulnerability in vRealize Operations Manager API (CVE-2021-21983) prior to 8.4 may allow an authenticated malicious act
CVSS
6.5
Medio
EPSS
68.8%
p99
KEV
—
Exploit Today
30
0-100
Publicado: 31 mar 2021 · Última mod.: 12 ago 2026
68.6%EPSS · 30 días68.8%
2026-09-222026-10-20
Arbitrary file write vulnerability in vRealize Operations Manager API (CVE-2021-21983) prior to 8.4 may allow an authenticated malicious actor with network access to the vRealize Operations Manager API can write files to arbitrary locations on the underlying photon operating system.
- packetstormsecurity.comhttp://packetstormsecurity.com/files/162349/VMware-vRealize-Operations-Manager-Server-Side-Request-Forgery-Code-Execution.html
- www.vmware.comhttps://www.vmware.com/security/advisories/VMSA-2021-0004.html
- packetstormsecurity.comhttp://packetstormsecurity.com/files/162349/VMware-vRealize-Operations-Manager-Server-Side-Request-Forgery-Code-Execution.html
- www.vmware.comhttps://www.vmware.com/security/advisories/VMSA-2021-0004.html
Sin CVEs relacionados por CWE o producto.