漏洞描述 vmware VMware vRealize Operations是美国威睿(vmware)公司的一个应用程序。一个统一的,基于AI的平台上为私有,混合和多云环境提供自动驾驶的IT运营管理。 VMware vRealize Operations 存在安全漏洞,该漏洞源于更新地址服务器端请求伪造和任意文件写入。
相关漏洞推荐 POC CVE-2018-6961: VMware NSX SD-WAN Edge - Command Injection (CVE-2025-41252) VMware NSX未认证的用户名枚举漏洞 (CVE-2025-41246) VMware Tools for Windows授权不当漏洞 (CVE-2025-41250)VMware vCenter SMTP头部注入漏洞 CVE-2023-20888: VMware Aria Operations for Networks - Remote Code Execution POC CVE-2020-11853: Micro Focus Operations Bridge Manager <=2020.05 - Remote Code Execution POC CVE-2021-21972: VMware vSphere Client (HTML5) - Remote Code Execution POC CVE-2021-21973: VMware vSphere - Server-Side Request Forgery POC CVE-2021-21975: vRealize Operations Manager API - Server-Side Request Forgery POC CVE-2021-21978: VMware View Planner <4.6 SP1- Remote Code Execution POC CVE-2021-21985: VMware vSphere Client (HTML5) - Remote Code Execution POC CVE-2021-22005: VMware vCenter Server - Arbitrary File Upload POC CVE-2021-22502: Micro Focus Operations Bridge Reporter - Remote Code Execution