CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2021-03-31
VMware vRealize Operations Manager API Server-Side Request Forgery (SSRF) Vulnerability (CVE-2021-21975) Analysis and Mitigation Guide
[Affected Scope] VMware vRealize Operations Manager API prior to version 8.4
[Impact] Unauthenticated network-adjacent or remote attackers can perform SSRF attacks to steal administrative credentials and compromise internal infrastructure
[Mitigation] Apply official security patches immediately or implement temporary API endpoint access restrictions