CVE-2021-22033

LOW

VMware vRealize Operations < 8.6.0 - Server-Side Request Forgery

Title source: llm
STIX 2.1

Description

Releases prior to VMware vRealize Operations 8.6 contain a Server Side Request Forgery (SSRF) vulnerability.

References (1)

Core 1
Core References
Patch, Vendor Advisory x_refsource_misc
https://www.vmware.com/security/advisories/VMSA-2021-0021.html

Scores

CVSS v3 2.7
EPSS 0.0016
EPSS Percentile 36.3%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N

Details

CWE
CWE-918
Status published
Products (3)
vmware/cloud_foundation 3.0.0 - 4.3.1
vmware/vrealize_operations 7.0.0 - 8.6.0
vmware/vrealize_suite_lifecycle_manager 8.0 - 8.2
Published Oct 13, 2021
Tracked Since Feb 18, 2026