Releases prior to VMware vRealize Operations 8.6 contain a Server Side Request Forgery (SSRF) vulnerability. Rated low severity (CVSS 2.7), this vulnerability is remotely exploitable, low attack complexity. This Server-Side Request Forgery (SSRF) vulnerability could allow attackers to make the server perform requests to unintended internal or external resources.
SSRF
VMware
Cloud Foundation
Vrealize Operations
Vrealize Suite Lifecycle Manager
NVD
CVSS 3.1
2.7
EPSS
0.6%