Vulnerabilities

TI-2026-16984 CVE-2026-20967 · GHSA-8gfh-97q4-r32h

System Center Operations Manager (SCOM) Elevation of Privilege Vulnerability

MEDIUM 42

Improper input validation in System Center Operations Manager allows an authorized attacker to elevate privileges over a network.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01188 Published 2026-03-10 Fixed in 10.19.10658.0, 10.22.11951.0 +1 CWE-20

TI-2025-20536 CVE-2025-27743 · GHSA-6vg9-pg49-5fg4

Microsoft System Center Elevation of Privilege Vulnerability

LOW 38

Untrusted search path in System Center allows an authorized attacker to elevate privileges locally.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00901 Published 2025-04-08 No fix listed CWE-426

TI-2024-14094 CVE-2024-21334 · GHSA-75r3-jg89-hhjp

Open Management Infrastructure (OMI) Remote Code Execution Vulnerability

HIGH 68

Open Management Infrastructure (OMI) Remote Code Execution Vulnerability

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.20157 Published 2024-03-12 Fixed in 10.19.1253.0, 10.22.1070.0 +1 CWE-416

TI-2024-14090 CVE-2024-21330 · GHSA-6m8c-mx2x-w4pf

Open Management Infrastructure (OMI) Elevation of Privilege Vulnerability

HIGH 69

Open Management Infrastructure (OMI) Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00988 Published 2024-03-12 Fixed in 10.19.1253.0, 10.22.1070.0 +6 CWE-122

TI-2023-18096 CVE-2023-36043 · GHSA-7523-xcc2-m3rm

Open Management Infrastructure Information Disclosure Vulnerability

LOW 32

Open Management Infrastructure Information Disclosure Vulnerability

CVSS 3.1MEDIUM 6.5 Local Low privileges No interaction EPSS 0.01399 Published 2023-11-14 Fixed in 1.7.3-0 CWE-200

TI-2022-14758 CVE-2022-33640 · GHSA-6625-jr57-474g

System Center Operations Manager: Open Management Infrastructure (OMI) Elevation of Privilege Vulnerability

LOW 37

System Center Operations Manager: Open Management Infrastructure (OMI) Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00603 Published 2022-08-09 Fixed in 1.6.10-2, 10.19.1158.0 +2 CWE-269

TI-2022-11694 CVE-2022-29149

Open Management Infrastructure (OMI) Elevation of Privilege Vulnerability

LOW 36

Open Management Infrastructure (OMI) Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00951 Published 2022-06-15 Fixed in DSC Agent versions: 2.71.1.33, 3.0.0.7 +7

TI-2021-18176 CVE-2021-41352 · GHSA-9gxv-h2pm-f223

SCOM Information Disclosure Vulnerability

LOW 38

SCOM Information Disclosure Vulnerability

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02944 Published 2021-10-13 Fixed in 7.2.12335.0, 10.19.10550.0 +1

TI-2021-16226 CVE-2021-38649 · GHSA-9rvc-mxjm-qh6v

Open Management Infrastructure Elevation of Privilege Vulnerability

CRITICAL 93KEV

Open Management Infrastructure Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.02887 Published 2021-09-15 Fixed in DSC Agent versions: 2.71.1.25, 2.70.0.30 +8

TI-2021-16225 CVE-2021-38648 · GHSA-p8gr-7qcg-86p9

Open Management Infrastructure Elevation of Privilege Vulnerability

CRITICAL 93KEV

Open Management Infrastructure Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.11424 Published 2021-09-15 Fixed in DSC Agent versions: 2.71.1.25, 2.70.0.30 +8

TI-2021-16224 CVE-2021-38647 · GHSA-rp2g-5hw2-q565

Open Management Infrastructure (OMI) Remote Code Execution Vulnerability

CRITICAL 100KEV

Open Management Infrastructure (OMI) Remote Code Execution Vulnerability

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.99933 Published 2021-09-15 Fixed in DSC Agent versions: 2.71.1.25, 2.70.0.30 +8

TI-2021-16222 CVE-2021-38645 · GHSA-727j-58h7-43f5

Open Management Infrastructure Elevation of Privilege Vulnerability

CRITICAL 93KEV

Open Management Infrastructure Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.02727 Published 2021-09-15 Fixed in DSC Agent versions: 2.71.1.25, 2.70.0.30 +8

TI-2021-01444 CVE-2021-1728 · GHSA-fc98-w582-pwcx

System Center Operations Manager Elevation of Privilege Vulnerability

MEDIUM 42

System Center Operations Manager Elevation of Privilege Vulnerability

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.02024 Published 2021-02-25 Fixed in publication CWE-269

TI-2020-01292 CVE-2020-1331 · GHSA-g72r-8jv2-wpp8

Authentication bypass by spoofing in Microsoft System Center 2016 Operations Manager

LOW 27

A spoofing vulnerability exists when System Center Operations Manager (SCOM) does not properly sanitize a specially crafted web request to an affected SCOM instance, aka 'System Center Operations Manager Spoofing Vulnera…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.01257 Published 2020-06-09 No fix listed CWE-290

TI-2015-02126 CVE-2015-2420 · GHSA-849f-x5xh-fgxg

Cross-site scripting (XSS) vulnerability in Microsoft System Center 2012 Operations…

LOW 31

Cross-site scripting (XSS) vulnerability in Microsoft System Center 2012 Operations Manager Gold before Rollup 8, SP1 before Rollup 10, and R2 before Rollup 7 allows remote attackers to inject arbitrary web script or HTM…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.08807 Published 2015-08-15 No fix listed CWE-79

TI-2013-00010 CVE-2013-0010 · GHSA-93pf-5w83-v5p3

Cross-site scripting (XSS) vulnerability in Microsoft System Center Operations Manager…

LOW 37

Cross-site scripting (XSS) vulnerability in Microsoft System Center Operations Manager 2007 SP1 and R2 allows remote attackers to inject arbitrary web script or HTML via crafted input, aka "System Center Operations Manag…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.16618 Published 2013-01-09 No fix listed CWE-79

TI-2013-00009 CVE-2013-0009 · GHSA-q5jv-7j7q-rggq

Cross-site scripting (XSS) vulnerability in Microsoft System Center Operations Manager…

LOW 35

Cross-site scripting (XSS) vulnerability in Microsoft System Center Operations Manager 2007 SP1 and R2 allows remote attackers to inject arbitrary web script or HTML via crafted input, aka "System Center Operations Manag…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.1364 Published 2013-01-09 No fix listed CWE-79

Vulnerabilities

Filters