Exploit for Server-Side Request Forgery in Vmware Cloud Foundation

githubexploit · 2021-04-10

Description

VMware Vrealize Operations Manager SSRF vulnerability

Affected software

Vmware Cloud Foundation= 3.0, 3.0.1, 3.0.1.1, 3.5, 3.5.1, 3.7, 3.7.1, 3.7.2, 3.8, 3.8.1, 3.9, 3.9.1, 3.10, 4.0, 4.0.1

Vmware Vrealize Operations Manager= 7.0.0, 7.5.0, 8.0.0, 8.0.1, 8.1.0, 8.1.1, 8.2.0, 8.3.0

Vmware Vrealize Suite Lifecycle Manager= 8.0, 8.0.1, 8.1, 8.2

All known vulnerabilities by product

Vrealize Operations

CVSS 7.5 for CVE-2021-21975

7.5

HIGH SEVERITY

Version 3.1

VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Attack Vector:NETWORK

Attack Complexity:LOW

Privileges Required:NONE

User Interaction:NONE

Scope:UNCHANGED

Confidentiality:HIGH

Integrity:NONE

Availability:NONE

Working code

99%confidence this exploit runs

Based on 2 file(s) in the source

EPSS Score

78.3%higher than 99.5% of all CVEs

Updated 2026-07-04

Exploit Details

Modified:2024-08-12 20:12

Last Seen:2025-08-31 20:56

Reporter:Vulnmachines

Last commit:2021-11-26

Tags

exploitserver-siderequest forgeryvmwarevrealize operations managervulnerabilityyoutubetwittertelegramvulnmachines.com

Other exploits for CVE-2021-21975

2026-08-29 KitPloitKITPLOIT

2026-08-29 KitPloitKITPLOIT

REALITY_SMASHER

2026-08-29 KitPloitKITPLOIT

VMWare-CVE-2021-21975

2026-08-29 KitPloitKITPLOIT

VMWare-vRealize-SSRF

2026-08-28 KitPloitKITPLOIT

VmWare-vCenter-vulnerability

2026-08-28 KitPloitKITPLOIT

2026-08-28 KitPloitKITPLOIT

2026-08-27 KitPloitKITPLOIT

Exploit Code

README15 lines

## https://sploitus.com/exploit?id=7663BC50-C08E-5741-B771-BE50606E7B78
# VMWare-CVE-2021-21975

# VMWare-CVE-2021-21975 SSRF vulnerability

## Youtube PoC

https://www.youtube.com/watch?v=faeTl8ZPs2s

### Follow 

### [Youtube](https://www.youtube.com/c/rapidsafeguard)
### [Twitter](https://www.twiiter.com/rapidsafeguard)
### [Telegram](https://t.me/rapidsafeguard)
### [Vulnmachines.com](https://www.vulnmachines.com)