CVE Catalog
Actively exploited in the wild
Microsoft Open Management Infrastructure (OMI) Privilege Escalation Vulnerability
Microsoft - Open Management Infrastructure (OMI) · Listed in the CISA KEV since 2021-11-03. This indicates confirmed attacks in production environments.
Required action: Apply updates per vendor instructions.
CVE-2021-38649
HighCVSS 7.0KEVExploitation Probability (EPSS)
High risk1.98%
79th percentile - higher than 79% of all known CVEs
Summary
Elevation of privilege vulnerability in Open Management Infrastructure. Could be exploited to gain elevated privileges.
Risk Assessment
Risk of privilege escalation and system security compromise.
Recommendation
Apply security updates for Open Management Infrastructure.
Original NVD description (English source)
Open Management Infrastructure Elevation of Privilege Vulnerability