KEV Entry

CVE-2021-38649

Known Exploited Vulnerability Entry External Catalog

Back to Catalog View Vulnerability
Entry Details
Confirmed Exploited

CVE-2021-38649

2021-11-03 00:00 UTC

Timestamps

2021-11-03

2021-11-03

Scope

KEVIntel entry: Open Management Infrastructure Elevation of Privilege Vulnerability | Affected: Microsoft / Open Management Infrastructure, System Center Operations Manager (SCOM), Azure Automation State Configuration, DSC Extension, Azure Automation Update Management, Log Analytics Agent, Azure Diagnostics (LAD), Container Monitoring Solution, Azure Security Center, Azure Sentinel, Azure Stack Hub | CVSS: 7.0 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False

References
  • {'id': 'CVE-2021-38649', 'url': 'https://www.cve.org/CVERecord?id=CVE-2021-38649'}
  • {'id': 'kevintel', 'url': 'https://kevintel.com/vuln/CVE-2021-38649'}

3e036c56-0be9-4c36-8aff-e2a608496ed3

caeb2787-0d58-4236-9039-7c86c3e566f3

2026-06-19 12:47 UTC

2026-06-19 12:47 UTC

Evidence
1
Type Source Signal Confidence Details GCVE Metadata
public_report kevintel successful_exploitation 0.70
View details 
{
  "added_date": "2021-11-03T00:00:00.000Z",
  "ahead_of_cisa_kev": null,
  "cvss_score": 7.0,
  "cvss_severity": "HIGH",
  "epss_percentile": null,
  "epss_score": null,
  "feed": "KEVIntel (kevintel.com)",
  "not_yet_in_cisa_kev": false,
  "product": "Open Management Infrastructure, System Center Operations Manager (SCOM), Azure Automation State Configuration, DSC Extension, Azure Automation Update Management, Log Analytics Agent, Azure Diagnostics (LAD), Container Monitoring Solution, Azure Security Center, Azure Sentinel, Azure Stack Hub",
  "title": "Open Management Infrastructure Elevation of Privilege Vulnerability",
  "used_in_malware": "unknown",
  "vendor": "Microsoft"
}
 -
Export Options
JSON Object JSON API View Full Catalog