CVE-2021-21983: vmware cloud_foundation
Vulnerability summary
CVE-2021-21983 is a high (CVSS 8.5) vulnerability in vmware cloud_foundation. EPSS estimates a 68.77% chance of exploitation in the next 30 days, higher than 99.3% of scored vulnerabilities. 2 public exploits are recorded.
Timeline
- 31-03-2021PublishedVulnerability first disclosed.
- 12-08-2026Last modifiedVulnerability information updated.
Description
Arbitrary file write vulnerability in vRealize Operations Manager API (CVE-2021-21983) prior to 8.4 may allow an authenticated malicious actor with network access to the vRealize Operations Manager API can write files to arbitrary locations on the underlying photon operating system.
CVSS metrics
2 scores · 1 source · 2 versionsEPSS trend
Probability
68.77%
Chance of exploitation in the next 30 days
Percentile
99%
Versus all other CVEs
30-day change
+0.22 pp
From 68.56% on 18-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
2 foundExploit Reference (packetstormsecurity.com)
Maturity: unknown
VMware vRealize Operations (vROps) Manager SSRF RCE
exploit/linux/http/vmware_vrops_mgr_ssrf_rce
Maturity: weaponized
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Vmware3 products
- cloud_foundation3.0 | 3.0.1 | 3.0.1.1 | 3.5 | 3.5.1 | 3.7 | 3.7.1 | 3.7.2 | 3.8 | 3.8.1 | 3.9 | 3.9.1 | 3.10 | 4.0 | 4.0.1
- vrealize_operations_manager7.0.0 | 7.5.0 | 8.0.0 | 8.0.1 | 8.1.0 | 8.1.1 | 8.2.0 | 8.3.0
- vrealize_suite_lifecycle_manager8.0 | 8.0.1 | 8.1 | 8.2
1 vendor · 3 products