SC
Product
System Center Operations Manager
On CISA KEVExploited in the wildRansomware-linked
17
CVEs
4
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 10Medium 2Low 0
Watch
Add System Center Operations Manager to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2021-38647 RansomwareIn wildKEV | 9.8 | Sep 15 | Open Management Infrastructure (OMI) Remote Code Execution Vulnerability Affected: All versions, or not specified |
| CVE-2021-38648 In wildKEV | 7.8 | Sep 15 | Open Management Infrastructure Elevation of Privilege Vulnerability Affected: All versions, or not specified |
| CVE-2021-38645 In wildKEV | 7.8 | Sep 15 | Open Management Infrastructure Elevation of Privilege Vulnerability Affected: All versions, or not specified |
| CVE-2021-38649 In wildKEV | 7.0 | Sep 15 | Open Management Infrastructure Elevation of Privilege Vulnerability Affected: All versions, or not specified |
| CVE-2024-21334 | 9.8 | Mar 12 | Open Management Infrastructure (OMI) Remote Code Execution Vulnerability Affected: 2019; 2022 |
| CVE-2026-20967 | 8.8 | Mar 10 | System Center Operations Manager (SCOM) Elevation of Privilege Vulnerability Affected: 2019; 2019; 2019; 2019; 2019; 2019; +14 more |
| CVE-2021-1728 | 8.8 | Feb 25 | System Center Operations Manager Elevation of Privilege Vulnerability Affected: 2019 |
| CVE-2025-27743 | 7.8 | Apr 8 | Untrusted search path in System Center allows an authorized attacker to elevate privileges locally Affected: 2019; 2022; 2025 |
| CVE-2024-21330 | 7.8 | Mar 12 | Open Management Infrastructure (OMI) Elevation of Privilege Vulnerability Affected: 2019; 2022 |
| CVE-2022-33640 | 7.8 | Aug 9 | System Center Operations Manager: Open Management Infrastructure (OMI) Elevation of Privilege Vulnerability Affected: 2016; 2019; 2022 |
| CVE-2022-29149 | 7.8 | Jun 15 | Open Management Infrastructure (OMI) Elevation of Privilege Vulnerability Affected: 2016; 2019; 2022 |
| CVE-2021-41352 | 7.5 | Oct 13 | SCOM Information Disclosure Vulnerability Affected: 2012; 2016; 2019 |
| CVE-2023-36043 | 6.5 | Nov 14 | Open Management Infrastructure Information Disclosure Vulnerability Affected: 2016; 2019; 2022 |
| CVE-2020-1331 | 5.4 | Jun 9 | A spoofing vulnerability exists when System Center Operations Manager (SCOM) does not properly sanitize a specially crafted web request to an affected SCOM instance, aka 'System… Affected: All versions, or not specified |
| CVE-2015-2420 | – | Aug 15 | Cross-site scripting (XSS) vulnerability in Microsoft System Center 2012 Operations Manager Gold before Rollup 8, SP1 before Rollup 10, and R2 before Rollup 7 allows remote… Affected: 2012; 2012; 2012; 2012; 2012; 2012; +16 more |
| CVE-2013-0010 | – | Jan 9 | Cross-site scripting (XSS) vulnerability in Microsoft System Center Operations Manager 2007 SP1 and R2 allows remote attackers to inject arbitrary web script or HTML via crafted… Affected: 2007; 2007 |
| CVE-2013-0009 | – | Jan 9 | Cross-site scripting (XSS) vulnerability in Microsoft System Center Operations Manager 2007 SP1 and R2 allows remote attackers to inject arbitrary web script or HTML via crafted… Affected: 2007; 2007 |
Showing 17