CVE-2021-38647

No fix known ExploitedEPSS 100%CVSS 9.8

Open Management Infrastructure (OMI) Remote Code Execution Vulnerability

Published 2021-09-15 · In CISA KEV since 2021-11-03 · CVE record · OSV

Products: Microsoft Azure Automation State Configuration, DSC Extension, Microsoft Azure Automation Update Management, Microsoft Azure Diagnostics (LAD), Microsoft Azure Security Center, Microsoft Azure Sentinel, Microsoft Azure Stack Hub, Microsoft Container Monitoring Solution, Microsoft Log Analytics Agent, Microsoft Open Management Infrastructure, Microsoft System Center Operations Manager (SCOM)