Known Exploited Vulnerabilities January 18, 2022 · CISA KEV Catalog

CVE-2021-21975: VMware Server Side Request Forgery in vRealize Operations Manager API

Server Side Request Forgery (SSRF) in vRealize Operations Manager API prior to 8.4 may allow a malicious actor with network access to the vRealize Operations Manager API to perform a SSRF attack to steal administrative credentials.

Read the original at CISA KEV Catalog ↗

Topics

Vulnerabilities & Patching

Mentions

CVE-2021-21975VMware

Related

CVE-2025-22224: VMware ESXi and Workstation TOCTOU Race Condition Vulnerability Known Exploited Vulnerabilities · Mar 04, 2025

CVE-2025-22225: VMware ESXi Arbitrary Write Vulnerability Known Exploited Vulnerabilities · Mar 04, 2025

CVE-2025-22226: VMware ESXi, Workstation, and Fusion Information Disclosure Vulnerability Known Exploited Vulnerabilities · Mar 04, 2025