VMware vRealize Operations Manager 7.5.0
Approved changes feed: RSS · Atom
cpe:2.3:a:vmware:vrealize_operations_manager:7.5.0:*:*:*:*:*:*:*
part: a version: 7.5.0 update: *
| Vendor | Vmware (7bb62c7c-2241-5a0b-8dbc-5f13251fb24e) |
|---|---|
| Product | Vrealize Operations Manager (2ea910a4-855c-53ae-8f93-1f0f47c077f9) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2021-22027 |
vulnerable | 2026-06-08 05:29:59.643715 |
Details available
The vRealize Operations Manager API (8.x prior to 8.5) contains a Server Side Request Forgery in an end point. An unauthenticated malicious actor with network access to the vRealize Operations Manager API can perform a Server Side Request Forgery attack leading to information disclosure.
Published: 2021-08-30T17:54:40.000Z
Updated: 2024-08-03T18:30:23.955Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-22026 |
vulnerable | 2026-06-08 05:29:59.643238 |
Details available
The vRealize Operations Manager API (8.x prior to 8.5) contains a Server Side Request Forgery in an end point. An unauthenticated malicious actor with network access to the vRealize Operations Manager API can perform a Server Side Request Forgery attack leading to information disclosure.
Published: 2021-08-30T17:54:40.000Z
Updated: 2024-08-03T18:30:23.964Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-22025 |
vulnerable | 2026-06-08 05:29:59.642762 |
Details available
The vRealize Operations Manager API (8.x prior to 8.5) contains a broken access control vulnerability leading to unauthenticated API access. An unauthenticated malicious actor with network access to the vRealize Operations Manager API can add new nodes to existing vROps cluster.
Published: 2021-08-30T17:54:41.000Z
Updated: 2024-08-03T18:30:23.921Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-22024 |
vulnerable | 2026-06-08 05:29:59.642290 |
Details available
The vRealize Operations Manager API (8.x prior to 8.5) contains an arbitrary log-file read vulnerability. An unauthenticated malicious actor with network access to the vRealize Operations Manager API can read any log file resulting in sensitive information disclosure.
Published: 2021-08-30T17:53:37.000Z
Updated: 2024-08-03T18:30:23.934Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-22023 |
vulnerable | 2026-06-08 05:29:59.641692 |
Details available
The vRealize Operations Manager API (8.x prior to 8.5) has insecure object reference vulnerability. A malicious actor with administrative access to vRealize Operations Manager API may be able to modify other users information leading to an account takeover.
Published: 2021-08-30T17:53:35.000Z
Updated: 2024-08-03T18:30:23.936Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-22022 |
vulnerable | 2026-06-08 05:29:59.640207 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-21983 |
vulnerable | 2026-06-08 05:29:59.453252 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-21975 |
vulnerable | 2026-06-08 05:29:59.396272 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.