System Center Operations Manager (Microsoft) - vulnerabilities (CVEs)
17 CVEs, 0 in the last 30 days, 71 known versions, newest CVE from 2026-03-10. Vendor: Microsoft.
CVEs of System Center Operations Manager
- CVE-2026-20967 - CVSS 8.8 (high), 2026-03-10: Improper input validation in System Center Operations Manager allows an authorized attacker to elevate privileges over a network.
- CVE-2025-27743 - CVSS 7.8 (high), 2025-04-08: Untrusted search path in System Center allows an authorized attacker to elevate privileges locally.
- CVE-2024-21334 - CVSS 9.8 (critical), 2024-03-12: Open Management Infrastructure (OMI) Remote Code Execution Vulnerability
- CVE-2024-21330 - CVSS 7.8 (high), 2024-03-12: Open Management Infrastructure (OMI) Elevation of Privilege Vulnerability
- CVE-2023-36043 - CVSS 6.5 (medium), 2023-11-14: Open Management Infrastructure Information Disclosure Vulnerability
- CVE-2022-33640 - CVSS 7.8 (high), 2022-08-09: System Center Operations Manager: Open Management Infrastructure (OMI) Elevation of Privilege Vulnerability
- CVE-2022-29149 - CVSS 7.8 (high), 2022-06-15: Open Management Infrastructure (OMI) Elevation of Privilege Vulnerability
- CVE-2021-41352 - CVSS 7.5 (high), 2021-10-13: SCOM Information Disclosure Vulnerability
- CVE-2021-38647 - CVSS 9.8 (critical), 2021-09-15: Open Management Infrastructure (OMI) Remote Code Execution Vulnerability
- CVE-2021-38649 - CVSS 7.8 (high), 2021-09-15: Open Management Infrastructure Elevation of Privilege Vulnerability
- CVE-2021-38648 - CVSS 7.8 (high), 2021-09-15: Open Management Infrastructure Elevation of Privilege Vulnerability
- CVE-2021-38645 - CVSS 7.8 (high), 2021-09-15: Open Management Infrastructure Elevation of Privilege Vulnerability
- CVE-2021-1728 - CVSS 8.8 (high), 2021-02-25: System Center Operations Manager Elevation of Privilege Vulnerability
- CVE-2020-1331 - CVSS 5.4 (medium), 2020-06-09: A spoofing vulnerability exists when System Center Operations Manager (SCOM) does not properly sanitize a specially crafted web request to an affected SCOM…
- CVE-2015-2420 - CVSS 4.3 (medium), 2015-08-15: Cross-site scripting (XSS) vulnerability in Microsoft System Center 2012 Operations Manager Gold before Rollup 8, SP1 before Rollup 10, and R2 before Rollup 7…
- CVE-2013-0010 - CVSS 4.3 (medium), 2013-01-09: Cross-site scripting (XSS) vulnerability in Microsoft System Center Operations Manager 2007 SP1 and R2 allows remote attackers to inject arbitrary web script…
- CVE-2013-0009 - CVSS 4.3 (medium), 2013-01-09: Cross-site scripting (XSS) vulnerability in Microsoft System Center Operations Manager 2007 SP1 and R2 allows remote attackers to inject arbitrary web script…
