vulnerability

VMWare vRealize: (CVE-2021-21975)

Try Surface Command

Back to search

Severity	CVSS	Published	Added	Modified
5	(AV:N/AC:L/Au:N/C:P/I:N/A:N)	Mar 31, 2021	Nov 30, 2021	Nov 21, 2025

Severity

CVSS

(AV:N/AC:L/Au:N/C:P/I:N/A:N)

Published

Mar 31, 2021

Added

Nov 30, 2021

Modified

Nov 21, 2025

Description

Server Side Request Forgery in vRealize Operations Manager API (CVE-2021-21975) prior to 8.4 may allow a malicious actor with network access to the vRealize Operations Manager API can perform a Server Side Request Forgery attack to steal administrative credentials.

Solution

vmware-vrealize-upgrade-latest

References

CVE-2021-21975
https://attackerkb.com/topics/CVE-2021-21975
URL-http://packetstormsecurity.com/files/162349/VMware-vRealize-Operations-Manager-Server-Side-Request-Forgery-Code-Execution.html
URL-https://www.vmware.com/security/advisories/VMSA-2021-0004.html

NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.

Try it today