Security Advisory

CVE-2021-21975

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2021-03-31 17:51:51

Last updated 2026-08-12 03:55:26

Assigner vmware

CVSS score 7.5

State PUBLISHED

Description

Server Side Request Forgery in vRealize Operations Manager API (CVE-2021-21975) prior to 8.4 may allow a malicious actor with network access to the vRealize Operations Manager API can perform a Server Side Request Forgery attack to steal administrative credentials.

← Browse all CVEs View on cve.org ↗