Known vulnerabilities in Microsoft System Center Operations Manager

Known vulnerabilities in Microsoft System Center Operations Manager

Vendor: Microsoft

Software: Microsoft System Center Operations Manager

Software CPE: cpe:2.3:a:microsoft:microsoft_system_center_operations_manager:*:*:*:*:*:*:*:*

Website: https://www.microsoft.com

Total vulnerabilities: 11

Public exploits: 0

Known exploited (KEV): 0

Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Vulnerabilities (11)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU123697 - Improper input validation CVE-2026-20967	CWE-20	Medium	No	No	10.19.10658.0, 10.22.11951.0, 10.25.10377.0	10.03.2026	SB2026031063
#VU107160 - Untrusted Search Path CVE-2025-27743	CWE-426	Low	No	No	-	08.04.2025	SB2025040851
#VU101438 - Improper Access Control CVE-2024-43594	CWE-284	Low	No	No	-	10.12.2024	SB2024121086
#VU87373 - Use After Free CVE-2024-21334	CWE-416	High	No	No	-	12.03.2024	SB20240312314 SB2024050211
#VU87372 - Permissions, Privileges, and Access Controls CVE-2024-21330	CWE-264	Low	No	No	-	12.03.2024	SB20240312314
#VU83050 - Exposure of sensitive information to an unauthorized actor CVE-2023-36043	CWE-200	Low	No	No	-	14.11.2023	SB2023111438
#VU66343 - Permissions, Privileges, and Access Controls CVE-2022-33640	CWE-264	Low	No	No	-	10.08.2022	SB2022081009
#VU64319 - Permissions, Privileges, and Access Controls CVE-2022-29149	CWE-264	Low	No	No	-	14.06.2022	SB2022061441
#VU57290 - Exposure of sensitive information to an unauthorized actor CVE-2021-41352	CWE-200	Medium	No	No	-	12.10.2021	SB2021101234
#VU50505 - Permissions, Privileges, and Access Controls CVE-2021-1728	CWE-264	Medium	No	No	-	09.02.2021	SB2021020959
#VU28913 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2020-1331	CWE-79	Low	No	No	-	09.06.2020	SB2020060967