CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2021-22023

The vRealize Operations Manager API (8.x prior to 8.5) has insecure object reference vulnerability. A malicious actor with administrative access to vRealize Operations Manager API may be able to modify other users information leading to an account takeover.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.003

EPSS Ranking 54.8%

CVSS Severity

CVSS v3 Score 7.2

CVSS v2 Score 6.5

References

Products affected by CVE-2021-22023

Vmware » Cloud Foundation » Version: 3.0

cpe:2.3:a:vmware:cloud_foundation:3.0
Vmware » Cloud Foundation » Version: 3.0.1

cpe:2.3:a:vmware:cloud_foundation:3.0.1
Vmware » Cloud Foundation » Version: 3.0.1.1

cpe:2.3:a:vmware:cloud_foundation:3.0.1.1
Vmware » Cloud Foundation » Version: 3.10

cpe:2.3:a:vmware:cloud_foundation:3.10
Vmware » Cloud Foundation » Version: 3.10.1

cpe:2.3:a:vmware:cloud_foundation:3.10.1
Vmware » Cloud Foundation » Version: 3.10.1.1

cpe:2.3:a:vmware:cloud_foundation:3.10.1.1
Vmware » Cloud Foundation » Version: 3.10.1.2

cpe:2.3:a:vmware:cloud_foundation:3.10.1.2
Vmware » Cloud Foundation » Version: 3.10.2.1

cpe:2.3:a:vmware:cloud_foundation:3.10.2.1
Vmware » Cloud Foundation » Version: 3.5

cpe:2.3:a:vmware:cloud_foundation:3.5
Vmware » Cloud Foundation » Version: 3.5.1

cpe:2.3:a:vmware:cloud_foundation:3.5.1
Vmware » Cloud Foundation » Version: 3.7

cpe:2.3:a:vmware:cloud_foundation:3.7
Vmware » Cloud Foundation » Version: 3.7.1

cpe:2.3:a:vmware:cloud_foundation:3.7.1
Vmware » Cloud Foundation » Version: 3.7.2

cpe:2.3:a:vmware:cloud_foundation:3.7.2
Vmware » Cloud Foundation » Version: 3.8

cpe:2.3:a:vmware:cloud_foundation:3.8
Vmware » Cloud Foundation » Version: 3.8.1

cpe:2.3:a:vmware:cloud_foundation:3.8.1
Vmware » Cloud Foundation » Version: 3.9

cpe:2.3:a:vmware:cloud_foundation:3.9
Vmware » Cloud Foundation » Version: 3.9.1

cpe:2.3:a:vmware:cloud_foundation:3.9.1
Vmware » Cloud Foundation » Version: 4.0

cpe:2.3:a:vmware:cloud_foundation:4.0
Vmware » Cloud Foundation » Version: 4.0.1

cpe:2.3:a:vmware:cloud_foundation:4.0.1
Vmware » Cloud Foundation » Version: 4.1

cpe:2.3:a:vmware:cloud_foundation:4.1
Vmware » Cloud Foundation » Version: 4.1.0.1

cpe:2.3:a:vmware:cloud_foundation:4.1.0.1
Vmware » Cloud Foundation » Version: 4.2

cpe:2.3:a:vmware:cloud_foundation:4.2
Vmware » Cloud Foundation » Version: 4.2.1

cpe:2.3:a:vmware:cloud_foundation:4.2.1
Vmware » Vrealize Operations Manager » Version: 7.5.0

cpe:2.3:a:vmware:vrealize_operations_manager:7.5.0
Vmware » Vrealize Operations Manager » Version: 8.0.0

cpe:2.3:a:vmware:vrealize_operations_manager:8.0.0
Vmware » Vrealize Operations Manager » Version: 8.0.1

cpe:2.3:a:vmware:vrealize_operations_manager:8.0.1
Vmware » Vrealize Operations Manager » Version: 8.1.0

cpe:2.3:a:vmware:vrealize_operations_manager:8.1.0
Vmware » Vrealize Operations Manager » Version: 8.1.1

cpe:2.3:a:vmware:vrealize_operations_manager:8.1.1
Vmware » Vrealize Operations Manager » Version: 8.2.0

cpe:2.3:a:vmware:vrealize_operations_manager:8.2.0
Vmware » Vrealize Operations Manager » Version: 8.3.0

cpe:2.3:a:vmware:vrealize_operations_manager:8.3.0
Vmware » Vrealize Suite Lifecycle Manager » Version: 8.0

cpe:2.3:a:vmware:vrealize_suite_lifecycle_manager:8.0
Vmware » Vrealize Suite Lifecycle Manager » Version: 8.0.1

cpe:2.3:a:vmware:vrealize_suite_lifecycle_manager:8.0.1
Vmware » Vrealize Suite Lifecycle Manager » Version: 8.1

cpe:2.3:a:vmware:vrealize_suite_lifecycle_manager:8.1
Vmware » Vrealize Suite Lifecycle Manager » Version: 8.2

cpe:2.3:a:vmware:vrealize_suite_lifecycle_manager:8.2

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2021-22023

Products

Pricing

Contact Us