OM
Product
Ops Manager
7
CVEs
0
On KEV
7.2
Max CVSS
3
New 30D
Severity mix
Critical 0High 1Medium 6Low 0
Watch
Add Ops Manager to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-8431 | 7.2 | May 12 | Ops Manager RCE via webhook body Affected: 7.0.0 before 8.0.23 |
| CVE-2026-87109 | 6.5 | Oct 9 | Ops Manager Sensitive MFA Enrollment Information Exposure in User Listings Affected: 7.0.0 before 7.0.23; 8.0.0 before 8.0.27 |
| CVE-2020-7927 | 6.5 | Nov 23 | Specially crafted API calls may allow an authenticated user who holds Organization Owner privilege to obtain an API key with Global Role privilege Affected: 4.2.0 through 4.2.17; 4.3.0 through 4.3.9; 4.4.0 through 4.4.2 |
| CVE-2026-87110 | 5.3 | Oct 9 | Ops Manager Uncontrolled Resource Consumption in Monitoring Endpoints Affected: 7.0.0 before 7.0.23; 8.0.0 before 8.0.27 |
| CVE-2019-2388 | 5.3 | May 13 | In affected Ops Manager versions there is an exposed http route was that may allow attackers to view a specific access log of a publicly exposed Ops Manager instance Affected: 4.0.9; 4.0.10; 4.1.5 |
| CVE-2021-20335 | 4.6 | Feb 11 | For MongoDB Ops Manager versions prior to and including 4.2.24 with multiple OM application servers, that have SSL turned on for their MongoDB processes, the upgrade to MongoDB… Affected: 4.2.0 through 4.2.24 |
| CVE-2026-87108 | 4.3 | Oct 9 | Ops Manager Improper Authorization in Daily Host Monitoring Retrieval Affected: 7.0.0 before 7.0.23; 8.0.0 before 8.0.27 |
Showing 7