CVE-2021-21975 Scanner
Detects 'Server-Side-Request-Forgery (SSRF)' vulnerability in vRealize Operations Manager API affects v. prior to 8.4.
Used 2.9k times · 3.4k assets checked · url
🔴
CISA Known Exploited Vulnerability
This CVE is actively exploited in the wild. CISA mandates federal agencies to patch immediately.
CVE
CVE-2021-21975
7.5
CVSScritical
Exploitable remotely over the internet · no authentication required.
Description
Server Side Request Forgery in vRealize Operations Manager API (CVE-2021-21975) prior to 8.4 may allow a malicious actor with network access to the vRealize Operations Manager API can perform a Server Side Request Forgery attack to steal administrative credentials.
Attack Vector
Network
Privileges Req.
None
User Interaction
None
vmware vrealize operations
Updated Oct 12, 2026View on NVD →
S4E scanner
Monitor this CVE on your assets
S4E maps published CVEs to scanners and forecasts the next disclosure window for your stack.
Create a free account →