Actively exploited in the wild

Microsoft Open Management Infrastructure (OMI) Privilege Escalation Vulnerability

Microsoft - Open Management Infrastructure (OMI) · Listed in the CISA KEV since 2021-11-03. This indicates confirmed attacks in production environments.

Required action: Apply updates per vendor instructions.

CVE-2021-38648

HighCVSS 7.8KEV

Published: 15/09/2021(UTC)Updated: 10/08/2026(UTC)Translated: 10/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Very high risk

11.42%

96th percentile - higher than 96% of all known CVEs

Summary

An elevation of privilege vulnerability in Open Management Infrastructure (OMI).

Risk Assessment

An attacker could exploit this to gain elevated privileges in the management environment, potentially leading to system integrity compromise.

Recommendation

Apply the security update provided by the OMI vendor.

Original NVD description (English source)

Open Management Infrastructure Elevation of Privilege Vulnerability