VMware vRealize Operations vulnerabilities
We track 3 vulnerabilities in VMware vRealize Operations products. 3 are rated high or critical, and 1 has been exploited in real attacks. The most recent was published on August 10, 2022.
Latest VMware vRealize Operations vulnerabilities
- 8.8 High severity
VMware vRealize Operations: Exposure of Sensitive Information to an Unauthorized Actor
VMware vRealize Operations contains an information disclosure vulnerability. A low-privileged malicious actor with network access can create and leak hex dumps, leading to information disclosure. Successful exploitation can lead to a remote code execution.
- 7.2 High severity
VMware vRealize Operations: Improper Privilege Management
VMware vRealize Operations contains a privilege escalation vulnerability. A malicious actor with administrative network access can escalate privileges to root.
- 7.5 High severity
VMware Server Side Request Forgery in vRealize Operations Manager API Exploited
Server Side Request Forgery in vRealize Operations Manager API (CVE-2021-21975) prior to 8.4 may allow a malicious actor with network access to the vRealize Operations Manager API can perform a Server Side Request Forgery attack to steal administrative credent