VulnSocial

CVE-2021-21975(vmware / cloud_foundation)

LOWCVSS 7.5 · HIGHCISA KEV

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

Server Side Request Forgery in vRealize Operations Manager API (CVE-2021-21975) prior to 8.4 may allow a malicious actor with network access to the vRealize Operations Manager API can perform a Server Side Request Forgery attack to steal administrative credentials.

vmware CVEsBack to dashboard
0.0/ 10 priority

Sources & remediation

Listed in the CISA Known Exploited Vulnerabilities catalog. Federal remediation due date: 2022-02-01. Apply updates per vendor instructions.

Exploit / PoC references
Vendor / third-party advisories
Other references
Weakness type (CWE)
CWE-918

Priority

LOW

Exploitation

ACTIVE

PoC

YES

Patch

NONE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • cloud_foundation
  • vrealize_operations_manager
  • vrealize_suite_lifecycle_manager

Threat summary

  • 1 mentions across 1 observed day

What's happening

  • 1 total mentions across 1 day

Affected systems

Vendors
vmware
Products
cloud_foundationvrealize_operations_managervrealize_suite_lifecycle_manager

26 versions affected across 3 products

Deep dive

Activity timeline1 mentions / 1d
00111Mentions · 2026-10-27: 110-27
Full discourse1 post
  • DFIR Lab@DFIR_Lab

    🚨 HIGH SEVERITY: CVE-2021-21975 (CVSS 7.5) SSRF in VMware vRealize Operations Manager API <8.4 allows unauthenticated attackers to steal admin credentials via network access. Patch immediately to v8.4+ #CVE #Vulnerability #PatchNow https://t.co/nIUZD9qcOQ

    0000014
    154 followersView on X
CPE platform detail27 entries

27 of 27 entries

PartVendorProductVersionTarget SWTarget HW
Appvmwarecloud_foundation3.0--
Appvmwarecloud_foundation3.0.1--
Appvmwarecloud_foundation3.0.1.1--
Appvmwarecloud_foundation3.10--
Appvmwarecloud_foundation3.5--
Appvmwarecloud_foundation3.5.1--
Appvmwarecloud_foundation3.7--
Appvmwarecloud_foundation3.7.1--
Appvmwarecloud_foundation3.7.2--
Appvmwarecloud_foundation3.8--
Appvmwarecloud_foundation3.8.1--
Appvmwarecloud_foundation3.9--
Appvmwarecloud_foundation3.9.1--
Appvmwarecloud_foundation4.0--
Appvmwarecloud_foundation4.0.1--
Appvmwarevrealize_operations_manager7.0.0--
Appvmwarevrealize_operations_manager7.5.0--
Appvmwarevrealize_operations_manager8.0.0--
Appvmwarevrealize_operations_manager8.0.1--
Appvmwarevrealize_operations_manager8.1.0--
Appvmwarevrealize_operations_manager8.1.1--
Appvmwarevrealize_operations_manager8.2.0--
Appvmwarevrealize_operations_manager8.3.0--
Appvmwarevrealize_suite_lifecycle_manager8.0--
Appvmwarevrealize_suite_lifecycle_manager8.0.1--
Appvmwarevrealize_suite_lifecycle_manager8.1--
Appvmwarevrealize_suite_lifecycle_manager8.2--

Explore more

Back to dashboardvmware CVEscloud_foundation vulnerabilities