Known vulnerabilities in VMware vRealize Operations Manager (vROps) 8.4.0

Vendor: Broadcom
Version: 8.4.0
Software CPE: cpe:2.3:a:broadcom:vrealize-operations:*:*:*:*:*:*:*:*
Total vulnerabilities: 6
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.8

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting VMware vRealize Operations Manager (vROps) version 8.4.0 VMware vRealize Operations Manager (vROps) 8.4.0 is affected by 6 vulnerabilities: 1 high, 3 medium, 2 low Critical High Medium Low

Vulnerabilities (6)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU56086 - Server-Side Request Forgery (SSRF)
CVE-2021-22027
CWE-918 Medium
No
No
7.5.0-HF15, 8.0.1-HF8, 8.1.1-HF8, 8.2.0-HF7, 8.3.0-HF6, 8.4.0-HF2 25.08.2021 SB2021082507
SB2021101003
#VU56085 - Server-Side Request Forgery (SSRF)
CVE-2021-22026
CWE-918 Medium
No
No
7.5.0-HF15, 8.0.1-HF8, 8.1.1-HF8, 8.2.0-HF7, 8.3.0-HF6, 8.4.0-HF2 25.08.2021 SB2021082507
SB2021101003
#VU56084 - Improper Access Control
CVE-2021-22025
CWE-284 High
No
No
7.5.0-HF15, 8.0.1-HF8, 8.1.1-HF8, 8.2.0-HF7, 8.3.0-HF6, 8.4.0-HF2 25.08.2021 SB2021082507
SB2021101003
#VU56083 - Exposure of sensitive information to an unauthorized actor
CVE-2021-22024
CWE-200 Medium
No
No
7.5.0-HF15, 8.0.1-HF8, 8.1.1-HF8, 8.2.0-HF7, 8.3.0-HF6, 8.4.0-HF2 25.08.2021 SB2021082507
SB2021101003
#VU56082 - Improper input validation
CVE-2021-22023
CWE-20 Low
No
No
7.5.0-HF15, 8.0.1-HF8, 8.1.1-HF8, 8.2.0-HF7, 8.3.0-HF6, 8.4.0-HF2 25.08.2021 SB2021082507
SB2021101003
#VU56081 - Exposure of sensitive information to an unauthorized actor
CVE-2021-22022
CWE-200 Low
No
No
7.5.0-HF15, 8.0.1-HF8, 8.1.1-HF8, 8.2.0-HF7, 8.3.0-HF6, 8.4.0-HF2 25.08.2021 SB2021082507
SB2021101003