CVE-2021-22033
published 2021-10-13CVE-2021-22033: Releases prior to VMware vRealize Operations 8.6 contain a Server Side Request Forgery (SSRF) vulnerability.
PriorityP49low2.7CVSS 3.1
AVNACLPRHUINSUCLINAN
EPSS
0.59%
44.2th percentile
Releases prior to VMware vRealize Operations 8.6 contain a Server Side Request Forgery (SSRF) vulnerability.
Affected
3 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| vmware | cloud_foundation | 3.0.0 – 4.3.1 | — |
| vmware | vrealize_operations | >= 7.0.0 < 8.6.0 | 8.6.0 |
| vmware | vrealize_suite_lifecycle_manager | 8.0 – 8.2 | — |
CVSS provenance
nvdv3.12.7LOWCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N
nvdv2.04.0MEDIUMAV:N/AC:L/Au:S/C:P/I:N/A:N
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
VMware
VMware vRealize Operations update addresses SSRF Vulnerability (CVE-2021-22033)
vendor_vmware·2021-10-12·CVSS 2.7
CVE-2021-22033 [LOW] VMware vRealize Operations update addresses SSRF Vulnerability (CVE-2021-22033)
VMSA-2021-0021: VMware vRealize Operations update addresses SSRF Vulnerability (CVE-2021-22033)
vRealize Operations contains a Server Side Request Forgery (SSRF) vulnerability. VMware has evaluated the severity of this issue to be in the Low severity range with a maximum CVSSv3 base score of 2.7.
CVEs: CVE-2021-22033
Affected products: VMware Aria, VMware Cloud Foundation, VMware vRealize
GHSA
GHSA-r2cc-q3jw-4vhv: Releases prior to VMware vRealize Operations 8
ghsa_unreviewed·2022-05-24
CVE-2021-22033 [MEDIUM] CWE-918 GHSA-r2cc-q3jw-4vhv: Releases prior to VMware vRealize Operations 8
Releases prior to VMware vRealize Operations 8.6 contain a Server Side Request Forgery (SSRF) vulnerability.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2021-10-13
Published