Microsoft System Center Operations Manager vulnerabilities
17 vulnerabilities
Known vulnerabilities in Microsoft System Center Operations Manager, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2013-0010microsoftsystem_center_operations_manager
EPSS score16.62%
Cross-site scripting (XSS) vulnerability in Microsoft System Center Operations Manager 2007 SP1 and R2 allows remote attackers to inject arbitrary web script or HTML via crafted input, aka "System Center Operations Manager Web Console XSS Vulnerability," a different vulnerability than CVE-2013-0009.CVE-2013-0009microsoftsystem_center_operations_managerEPSS score13.64%
Cross-site scripting (XSS) vulnerability in Microsoft System Center Operations Manager 2007 SP1 and R2 allows remote attackers to inject arbitrary web script or HTML via crafted input, aka "System Center Operations Manager Web Console XSS Vulnerability," a different vulnerability than CVE-2013-0010.CVE-2021-1728microsoftsystem center 2019 operations manager+1EPSS score2.02%
System Center Operations Manager Elevation of Privilege VulnerabilityCVE-2021-41352microsoftsystem center 2012 r2 operations manager+3EPSS score2.94%
SCOM Information Disclosure VulnerabilityCVE-2021-38649microsoftazure_automation_state_configuration+12KEVEPSS score2.89%
Open Management Infrastructure Elevation of Privilege VulnerabilityCVE-2021-38648microsoftazure_automation_state_configuration+12KEVEPSS score11.42%
Open Management Infrastructure Elevation of Privilege VulnerabilityCVE-2021-38647microsoftazure_automation_state_configuration+11KEVRansomwareEPSS score99.93%
Open Management Infrastructure (OMI) Remote Code Execution VulnerabilityCVE-2021-38645microsoftazure_automation_state_configuration+11KEVEPSS score2.73%
Open Management Infrastructure Elevation of Privilege VulnerabilityCVE-2015-2420microsoftsystem_center_operations_managerEPSS score8.81%
Cross-site scripting (XSS) vulnerability in Microsoft System Center 2012 Operations Manager Gold before Rollup 8, SP1 before Rollup 10, and R2 before Rollup 7 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka "System Center Operations Manager Web Console XSS Vulnerability."CVE-2025-27743microsoftsystem_center_data_protection_manager+19EPSS score0.88%
Untrusted search path in System Center allows an authorized attacker to elevate privileges locally.CVE-2020-1331microsoftsystem center 2016 operations manager+1EPSS score1.26%
A spoofing vulnerability exists when System Center Operations Manager (SCOM) does not properly sanitize a specially crafted web request to an affected SCOM instance, aka 'System Center Operations Manager Spoofing Vulnerability'.CVE-2022-29149microsoftazure_automation_state_configuration+14EPSS score0.92%
Open Management Infrastructure (OMI) Elevation of Privilege VulnerabilityCVE-2022-33640microsoftopen_management_infrastructure+4EPSS score0.60%
System Center Operations Manager: Open Management Infrastructure (OMI) Elevation of Privilege VulnerabilityCVE-2024-21330microsoftazure_automation+11EPSS score0.99%
Open Management Infrastructure (OMI) Elevation of Privilege VulnerabilityCVE-2024-21334microsoftopen_management_infrastructure+3EPSS score20.16%
Open Management Infrastructure (OMI) Remote Code Execution VulnerabilityCVE-2026-20967microsoftsystem_center_operations_manager+3EPSS score1.10%
Improper input validation in System Center Operations Manager allows an authorized attacker to elevate privileges over a network.CVE-2023-36043microsoftsystem_center_operations_manager+3EPSS score1.40%
Open Management Infrastructure Information Disclosure Vulnerability