[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fqLLnBJxutazLbxMSFFZOW68xipBEY1eiVRYWjWhfnIE":3,"g5a-risk:CVE-2021-22025":130},{"success":4,"data":5,"meta":128},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":39,"epssPercentile":26,"epssTimeSeries":40,"severity":41,"affectedProducts":42,"affectedProductsCount":57,"references":58,"referencesCount":65,"weaknesses":66,"weaknessesCount":65,"isActivelyExploited":75,"cisaInfo":26,"otxData":26,"relatedBlogPosts":76,"seoMetadata":77,"configurations":102,"relatedVendorCves":126,"notableEvents":127},"CVE-2021-22025","What is CVE-2021-22025?","The vRealize Operations Manager API (8.x prior to 8.5) contains a broken access control vulnerability leading to unauthenticated API access. An unauthenticated malicious actor with network access to the vRealize Operations Manager API can add new nodes to existing vROps cluster.","The vRealize Operations Manager API (8.x prior to 8.5) contains a broken access control vulnerability leading to unauthenticated API access. An unauthenticat...","2021-08-30T18:15:08.373","2022-02-01T17:54:20.88",7.5,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:N",{"CVSSMetricV31":15,"CVSSMetricV30":26,"CVSSMetricV2":29,"CVSSMetricV40":26},[16],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":27,"ImpactScore":28},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":23,"IntegrityImpact":25,"AvailabilityImpact":23,"BaseScore":12,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":23,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},"3.1","NETWORK","LOW","NONE","UNCHANGED","HIGH",null,3.9,3.6,[30],{"Source":17,"Type":18,"CVSSData":31,"BaseSeverity":36,"ExploitabilityScore":37,"ImpactScore":38,"ACInsufInfo":26,"ObtainAllPrivilege":26,"ObtainUserPrivilege":26,"ObtainOtherPrivilege":26,"UserInteractionRequired":26},{"Version":32,"VectorString":33,"AccessVector":21,"AccessComplexity":22,"Authentication":23,"ConfidentialityImpact":23,"IntegrityImpact":34,"AvailabilityImpact":23,"BaseScore":35,"BaseSeverity":26,"Exploitability":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"CollateralDamagePotential":26,"TargetDistribution":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":26,"EnvironmentalScore":26},"2.0","AV:N\u002FAC:L\u002FAu:N\u002FC:N\u002FI:P\u002FA:N","PARTIAL",5,"MEDIUM",10,2.9,0.00809,[39,39,39,39,39,39,39],"High",[43,48,51,54],{"vendor":44,"product":45,"version":46,"criteria":47,"vulnerable":4},"vmware","cloud_foundation","*","cpe:2.3:a:vmware:cloud_foundation:*:*:*:*:*:*:*:*",{"vendor":44,"product":49,"version":46,"criteria":50,"vulnerable":4},"vrealize_operations_manager","cpe:2.3:a:vmware:vrealize_operations_manager:*:*:*:*:*:*:*:*",{"vendor":44,"product":49,"version":52,"criteria":53,"vulnerable":4},"7.5.0","cpe:2.3:a:vmware:vrealize_operations_manager:7.5.0:*:*:*:*:*:*:*",{"vendor":44,"product":55,"version":46,"criteria":56,"vulnerable":4},"vrealize_suite_lifecycle_manager","cpe:2.3:a:vmware:vrealize_suite_lifecycle_manager:*:*:*:*:*:*:*:*",4,[59],{"url":60,"source":61,"tags":62},"https:\u002F\u002Fwww.vmware.com\u002Fsecurity\u002Fadvisories\u002FVMSA-2021-0018.html","Vmware",[63,64],"Patch","Vendor Advisory",1,[67],{"id":68,"name":69,"description":70,"extendedDescription":71,"status":72,"abstraction":73,"structure":74},"CWE-287","Improper Authentication","When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.","","Draft","Class","Simple",false,[],{"title":78,"metaDescription":79,"keywords":80,"canonicalUrl":81,"structuredData":82},"What is CVE-2021-22025? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2021-22025, a high severity cyber security vulnerability from 2021. The vRealize Operations Manager API (8.x prior to 8.5) cont...","CVE-2021-22025, CVE-2021-22025 vulnerability, CVE-2021-22025 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2021, CVSS score, exploit, patch, remediation, vmware security, cloud_foundation vulnerability, vrealize_operations_manager vulnerability, vrealize_suite_lifecycle_manager vulnerability","\u002Fwhat-is\u002Fcve-2021-22025",{"@context":83,"@type":84,"headline":78,"description":79,"datePublished":10,"dateModified":11,"author":85,"publisher":89,"about":93,"mainEntityOfPage":97,"articleSection":100,"keywords":101},"https:\u002F\u002Fschema.org","TechArticle",{"@type":86,"name":87,"url":88},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":86,"name":87,"url":88,"logo":90},{"@type":91,"url":92},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":94,"name":6,"description":95,"additionalType":96},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":98,"@id":99},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2021-22025","Cybersecurity","CVE-2021-22025, CVE-2021-22025 vulnerability, CVE-2021-22025 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[103],{"Operator":26,"Negate":26,"Nodes":104},[105],{"Operator":106,"Negate":26,"CPEMatch":107},"OR",[108,112,116,120,122],{"Vulnerable":4,"Criteria":47,"MatchCriteriaID":109,"VersionStartExcluding":26,"VersionStartIncluding":110,"VersionEndExcluding":26,"VersionEndIncluding":111},"DE39D06C-8AF4-4978-BCFD-80FB0A36C93A","3.0","3.10.2.1",{"Vulnerable":4,"Criteria":47,"MatchCriteriaID":113,"VersionStartExcluding":26,"VersionStartIncluding":114,"VersionEndExcluding":26,"VersionEndIncluding":115},"C6A3FA17-BA09-499D-BAC7-053B380DF443","4.0","4.2.1",{"Vulnerable":4,"Criteria":50,"MatchCriteriaID":117,"VersionStartExcluding":26,"VersionStartIncluding":118,"VersionEndExcluding":119,"VersionEndIncluding":26},"B12F2BE9-8DA7-4BF0-85C0-0B5D6C4532A8","8.0.0","8.5.0",{"Vulnerable":4,"Criteria":53,"MatchCriteriaID":121,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"6BC6471F-2FB5-4C7A-9B5D-0B08A8E2C08C",{"Vulnerable":4,"Criteria":56,"MatchCriteriaID":123,"VersionStartExcluding":26,"VersionStartIncluding":124,"VersionEndExcluding":26,"VersionEndIncluding":125},"E4767C7D-8165-43A6-8F16-12F8EE65FDFB","8.0","8.2",[],[],{"lastModified":11,"cacheTime":129,"version":32},1792377227886,{"score":131,"band":132,"action":133,"scoredAt":134},47,"Medium","Plan remediation","2026-10-16T06:51:55.084007+00:00"]