CVE-2021-21975CISA KEVEPSS p99.6%

CVE-2021-21975VMware Server Side Request Forgery in vRealize Operations Manager API

VMware / vRealize Operations Manager API

Description

Server Side Request Forgery (SSRF) in vRealize Operations Manager API prior to 8.4 may allow a malicious actor with network access to the vRealize Operations Manager API to perform a SSRF attack to steal administrative credentials.

Scoring

CVSS 7.5 ()
VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
EPSS78.00% probability of exploitation · percentile 99.6% · 2026-10-06T12:00:23Z
Last modified2026-10-02

CISA KEV entry

Added to KEV: 2022-01-18

(incoming)1

TypeTargetConfidenceTier
KEVEntryVMware Server Side Request Forgery in vRealize Operations Manager APIkev-cve-2021-219750%live

Related by meaning· 6

Nearest entities by semantic similarity across the cs-graph corpus.

CVE
VMware vCenter Server and Cloud Foundation Server Side Request Forgery (SSRF) Vulnerability
CVE
Omnissa Workspace ONE Server-Side Request Forgery
CVE
VMware vCenter Server Remote Code Execution Vulnerability
CVE
CVE-2026-41722
CVE
CVE-2026-41723
CVE
CVE-2026-41724
Sourced from NVD + CISA KEV + FIRST.org EPSS. Curated for EU compliance use cases by Adam Lundqvist, Founder at SQUR.