{"id":"CVE-2021-21975","revision":"9cb35909a5c845ffb71e28024e8eb5cb","records":[{"revision":"9cb35909a5c845ffb71e28024e8eb5cb","observedAt":"2026-10-23T15:48:27.903+00:00","statement":{"source":"cve-program","id":"CVE-2021-21975","aliases":[],"title":"Server Side Request Forgery in vRealize Operations Manager API (CVE-2021-21975) prior to 8.4 may allow a malicious actor with network access to the vRealize Operations Manager API can perform a Server Side Request Forgery attack to steal ad…","description":"Server Side Request Forgery in vRealize Operations Manager API (CVE-2021-21975) prior to 8.4 may allow a malicious actor with network access to the vRealize Operations Manager API can perform a Server Side Request Forgery attack to steal administrative credentials.","state":0,"publishedAt":"2021-03-31T17:51:51+00:00","modifiedAt":"2026-10-01T20:01:35.946+00:00","affected":[{"ecosystem":"Vendor product","name":"VMware vRealize Operations","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"product\": \"VMware vRealize Operations\",\n                    \"vendor\": \"n/a\",\n                    \"versions\": [\n                        {\n                            \"status\": \"affected\",\n                            \"version\": \"VMware vRealize Operations prior to 8.4\"\n                        }\n                    ]\n                }"}],"metrics":[],"references":["https://www.vmware.com/security/advisories/VMSA-2021-0004.html","http://packetstormsecurity.com/files/162349/VMware-vRealize-Operations-Manager-Server-Side-Request-Forgery-Code-Execution.html"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2021-21975","license":"CVE Program Terms of Use","key":"cve-program:CVE-2021-21975","identifiers":["CVE-2021-21975"]},"retained":false,"historicalAffected":[]}],"coverage":[]}