Vulnerability · Published Oct 13, 2021 · Assigned by microsoft

CVE-2021-41352SCOM Information Disclosure Vulnerability

High 7.5

In plain English

A high-severity security flaw in System Center 2012 R2 Operations Manager from Microsoft. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 2.9% (higher than 87% of all known vulnerabilities).

Severity (CVSS 3.1)7.5High
Exploit odds (30 days)2.9%top 12.8% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known

Official description

SCOM Information Disclosure Vulnerability

Affected products (as reported)

VendorProductVersions
Microsoft System Center 2016 Operations Manager 7.2.0.0 – before 7.2.12335.0
Microsoft System Center 2019 Operations Manager 10.0.0.0 – before 10.19.10550.0
Microsoft System Center 2012 R2 Operations Manager 7.1.0.0 – before 7.1.10226.1413

References