Arbitrary file write vulnerability in vRealize Operations Manager API (CVE-2021-21983) prior to 8.4 may allow an authenticated malicious actor with network access to the vRealize Operations Manager A…

Medium CVSS 6.5

CVECVE-2021-21983

First seen2026-08-12 07:15 UTC

Disclosed2021-03-31 18:15 UTC

Last updated2026-08-12 07:15 UTC

Channel statusauto

Summary

Arbitrary file write vulnerability in vRealize Operations Manager API (CVE-2021-21983) prior to 8.4 may allow an authenticated malicious actor with network access to the vRealize Operations Manager API can write files to arbitrary locations on the underlying photon operating system.

In-depth triage

No in-depth report has been generated yet (DR-003 v2 AI pipeline is under construction).

Affected products

Sources

NVD DATABASE

Original Links

http://packetstormsecurity.com/files/162349/VMware-vRealize-Operations-Manager-Server-Side-Request-Forgery-Code-Execution.html Exploit
https://www.vmware.com/security/advisories/VMSA-2021-0004.html Vendor Advisory
http://packetstormsecurity.com/files/162349/VMware-vRealize-Operations-Manager-Server-Side-Request-Forgery-Code-Execution.html Exploit
https://www.vmware.com/security/advisories/VMSA-2021-0004.html Vendor Advisory

Timeline

2026-08-12 nvd_ingest NVD