Known vulnerabilities in VMware vRealize Operations Manager (vROps) 7.5

Vendor: Broadcom
Software: VMware vRealize Operations Manager (vROps)
Version: 7.5
Software CPE: cpe:2.3:a:broadcom:vrealize-operations:*:*:*:*:*:*:*:*
Website: https://www.broadcom.com/
Total vulnerabilities: 10
Public exploits: 4
Known exploited (KEV): 3
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting VMware vRealize Operations Manager (vROps) version 7.5 VMware vRealize Operations Manager (vROps) 7.5 is affected by 10 vulnerabilities: 1 critical, 1 high, 6 medium, 2 low Critical High Medium Low

Vulnerabilities (10)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU56086 - Server-Side Request Forgery (SSRF)
CVE-2021-22027		 CWE-918 Medium
No
No
 7.5.0-HF15, 8.0.1-HF8, 8.1.1-HF8, 8.2.0-HF7, 8.3.0-HF6, 8.4.0-HF2 25.08.2021 SB2021082507
SB2021101003
#VU56085 - Server-Side Request Forgery (SSRF)
CVE-2021-22026		 CWE-918 Medium
No
No
 7.5.0-HF15, 8.0.1-HF8, 8.1.1-HF8, 8.2.0-HF7, 8.3.0-HF6, 8.4.0-HF2 25.08.2021 SB2021082507
SB2021101003
#VU56084 - Improper Access Control
CVE-2021-22025		 CWE-284 High
No
No
 7.5.0-HF15, 8.0.1-HF8, 8.1.1-HF8, 8.2.0-HF7, 8.3.0-HF6, 8.4.0-HF2 25.08.2021 SB2021082507
SB2021101003
#VU56083 - Exposure of sensitive information to an unauthorized actor
CVE-2021-22024		 CWE-200 Medium
No
No
 7.5.0-HF15, 8.0.1-HF8, 8.1.1-HF8, 8.2.0-HF7, 8.3.0-HF6, 8.4.0-HF2 25.08.2021 SB2021082507
SB2021101003
#VU56082 - Improper input validation
CVE-2021-22023		 CWE-20 Low
No
No
 7.5.0-HF15, 8.0.1-HF8, 8.1.1-HF8, 8.2.0-HF7, 8.3.0-HF6, 8.4.0-HF2 25.08.2021 SB2021082507
SB2021101003
#VU56081 - Exposure of sensitive information to an unauthorized actor
CVE-2021-22022		 CWE-200 Low
No
No
 7.5.0-HF15, 8.0.1-HF8, 8.1.1-HF8, 8.2.0-HF7, 8.3.0-HF6, 8.4.0-HF2 25.08.2021 SB2021082507
SB2021101003
#VU51808 - Unrestricted Upload of File with Dangerous Type
CVE-2021-21983		 CWE-434 Medium
Public exploit available
No
 - 31.03.2021 SB2021033102
SB2021101003
#VU51807 - Server-Side Request Forgery (SSRF)
CVE-2021-21975		 CWE-918 Medium
Public exploit available
Exploited
 - 31.03.2021 SB2021033102
SB2021101003
#VU27495 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2020-11652		 CWE-22 Medium
Public exploit available
Exploited
 - 04.05.2020 SB2020050410
SB2020050417
SB2020050506
and 10 more
#VU27494 - Improper Authentication
CVE-2020-11651		 CWE-287 Critical
Public exploit available
Exploited
 - 04.05.2020 SB2020050410
SB2020050417
SB2020050506
and 10 more