Advisories · Technology

Microsoft Open Management Infrastructure.

Every CVE that names Microsoft Open Management Infrastructure among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2024-21334 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+, CVSS 7+ and EPSS

Open Management Infrastructure (OMI) Remote Code Execution Vulnerability
- Microsoft System Center Operations Manager (SCOM) 2019
- Microsoft System Center Operations Manager (SCOM) 2022
- Memory corruption
Not analysed yet 12 Mar 2024
CVE-2024-21330 CVE record

CVSS 7.8 High

Open Management Infrastructure (OMI) Elevation of Privilege Vulnerability
- Microsoft System Center Operations Manager (SCOM) 2019
- Microsoft System Center Operations Manager (SCOM) 2022
- Memory corruption
Not analysed yet 12 Mar 2024
CVE-2022-33640 CVE record

CVSS 7.8 High

System Center Operations Manager: Open Management Infrastructure (OMI) Elevation of Privilege Vulnerability
- Microsoft Open Management Infrastructure
- Microsoft System Center Operations Manager (SCOM) 2019
- Privilege escalation
Not analysed yet 9 Aug 2022
CVE-2022-29149 CVE record

CVSS 7.8 High

Open Management Infrastructure (OMI) Elevation of Privilege Vulnerability
- Microsoft Azure Automation State Configuration, DSC Extension
- Microsoft Azure Automation Update Management
Not analysed yet 15 Jun 2022
CVE-2021-38649 CVE record

CVSS 7.0 HighCritical · KEVKEV

Open Management Infrastructure Elevation of Privilege Vulnerability
- Microsoft Azure Automation State Configuration, DSC Extension
- Microsoft Azure Automation Update Management
Not analysed yet 15 Sept 2021
CVE-2021-38648 CVE record

CVSS 7.8 HighCritical · KEV, CVSS 7+ and EPSSKEV

Open Management Infrastructure Elevation of Privilege Vulnerability
- Microsoft Azure Automation State Configuration, DSC Extension
- Microsoft Azure Automation Update Management
Not analysed yet 15 Sept 2021
CVE-2021-38647 CVE record

CVSS 9.8 CriticalCritical · KEV, CVSS 9+, CVSS 7+ and EPSSKEV · ransomware

Open Management Infrastructure (OMI) Remote Code Execution Vulnerability
- Microsoft Azure Automation State Configuration, DSC Extension
- Microsoft Azure Automation Update Management
Not analysed yet 15 Sept 2021
CVE-2021-38645 CVE record

CVSS 7.8 HighCritical · KEVKEV

Open Management Infrastructure Elevation of Privilege Vulnerability
- Microsoft Azure Automation State Configuration, DSC Extension
- Microsoft Azure Automation Update Management
Not analysed yet 15 Sept 2021