Microsoft System Center Operations Manager
17 CVEs affecting Microsoft System Center Operations Manager. Latest disclosed: 2026-03-10. Critical: 2, High: 10.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-21334 | Critical | 9.8 | 2024-03-12 | Open Management Infrastructure (OMI) Remote Code Execution Vulnerability |
CVE-2021-38647 | Critical | 9.8 | 2021-09-15 | Open Management Infrastructure (OMI) Remote Code Execution Vulnerability |
CVE-2026-20967 | High | 8.8 | 2026-03-10 | Improper input validation in System Center Operations Manager allows an authorized attacker to elevate privileges over a network. |
CVE-2021-1728 | High | 8.8 | 2021-02-25 | System Center Operations Manager Elevation of Privilege Vulnerability |
CVE-2025-27743 | High | 7.8 | 2025-04-08 | Untrusted search path in System Center allows an authorized attacker to elevate privileges locally. |
CVE-2024-21330 | High | 7.8 | 2024-03-12 | Open Management Infrastructure (OMI) Elevation of Privilege Vulnerability |
CVE-2022-33640 | High | 7.8 | 2022-08-09 | System Center Operations Manager: Open Management Infrastructure (OMI) Elevation of Privilege Vulnerability |
CVE-2022-29149 | High | 7.8 | 2022-06-15 | Open Management Infrastructure (OMI) Elevation of Privilege Vulnerability |
CVE-2021-38648 | High | 7.8 | 2021-09-15 | Open Management Infrastructure Elevation of Privilege Vulnerability |
CVE-2021-38645 | High | 7.8 | 2021-09-15 | Open Management Infrastructure Elevation of Privilege Vulnerability |
CVE-2021-41352 | High | 7.5 | 2021-10-13 | SCOM Information Disclosure Vulnerability |
CVE-2021-38649 | High | 7.0 | 2021-09-15 | Open Management Infrastructure Elevation of Privilege Vulnerability |
CVE-2023-36043 | Medium | 6.5 | 2023-11-14 | Open Management Infrastructure Information Disclosure Vulnerability |
CVE-2020-1331 | Medium | 5.4 | 2020-06-09 | A spoofing vulnerability exists when System Center Operations Manager (SCOM) does not properly sanitize a specially crafted web request to an affected SCOM ins… |
CVE-2015-2420 | | 2015-08-15 | Cross-site scripting (XSS) vulnerability in Microsoft System Center 2012 Operations Manager Gold before Rollup 8, SP1 before Rollup 10, and R2 before Rollup 7… | |
CVE-2013-0010 | | 2013-01-09 | Cross-site scripting (XSS) vulnerability in Microsoft System Center Operations Manager 2007 SP1 and R2 allows remote attackers to inject arbitrary web script o… | |
CVE-2013-0009 | | 2013-01-09 | Cross-site scripting (XSS) vulnerability in Microsoft System Center Operations Manager 2007 SP1 and R2 allows remote attackers to inject arbitrary web script o… |