CVE Catalog

Actively exploited in the wild

Microsoft Open Management Infrastructure (OMI) Privilege Escalation Vulnerability

Microsoft - Open Management Infrastructure (OMI) · Listed in the CISA KEV since 2021-11-03. This indicates confirmed attacks in production environments.

Required action: Apply updates per vendor instructions.

CVE-2021-38645

HighCVSS 7.8KEV
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

High risk
1.89%

78th percentile - higher than 78% of all known CVEs

Summary

Elevation of privilege vulnerability in Open Management Infrastructure. Could be exploited to gain elevated privileges.

Risk Assessment

Risk of privilege escalation and system security compromise.

Recommendation

Apply security updates for Open Management Infrastructure.

Original NVD description (English source)

Open Management Infrastructure Elevation of Privilege Vulnerability

Vulnerability data from NVD (NIST) · CISA KEV · EPSS