CVE Watch12 de ago. de 2026

CVE-2021-21983

Arbitrary file write vulnerability in vRealize Operations Manager API (CVE-2021-21983) prior to 8.4 may allow an authenticated malicious act

CVSS

6.5

Média

EPSS

68.8%

p99

KEV

—

Exploit Today

0-100

Publicado: 31 de mar. de 2021 · Última mod.: 12 de ago. de 2026

EPSS · 30d

68.8%EPSS · 30 dias68.8%

2026-10-092026-11-06

Descrição técnica

Arbitrary file write vulnerability in vRealize Operations Manager API (CVE-2021-21983) prior to 8.4 may allow an authenticated malicious actor with network access to the vRealize Operations Manager API can write files to arbitrary locations on the underlying photon operating system.

Referências oficiais

packetstormsecurity.comhttp://packetstormsecurity.com/files/162349/VMware-vRealize-Operations-Manager-Server-Side-Request-Forgery-Code-Execution.html
www.vmware.comhttps://www.vmware.com/security/advisories/VMSA-2021-0004.html
packetstormsecurity.comhttp://packetstormsecurity.com/files/162349/VMware-vRealize-Operations-Manager-Server-Side-Request-Forgery-Code-Execution.html
www.vmware.comhttps://www.vmware.com/security/advisories/VMSA-2021-0004.html

CVEs relacionados

Nenhum CVE relacionado por CWE ou produto.