{"history":[{"alert":0,"cve":"CVE-2021-38645","id":22321,"kind":"epss","observed_at":1794500401,"payload":"{\"date\": \"2026-11-12\", \"epss\": 0.02727, \"percentile\": 0.8627}"},{"alert":0,"cve":"CVE-2021-38645","id":19780,"kind":"epss","observed_at":1794327601,"payload":"{\"date\": \"2026-11-10\", \"epss\": 0.02727, \"percentile\": 0.86185}"},{"alert":0,"cve":"CVE-2021-38645","id":17746,"kind":"epss","observed_at":1794241201,"payload":"{\"date\": \"2026-11-09\", \"epss\": 0.02727, \"percentile\": 0.86167}"},{"alert":0,"cve":"CVE-2021-38645","id":15810,"kind":"epss","observed_at":1794154800,"payload":"{\"date\": \"2026-11-08\", \"epss\": 0.02727, \"percentile\": 0.8616}"},{"alert":0,"cve":"CVE-2021-38645","id":13788,"kind":"epss","observed_at":1794068402,"payload":"{\"date\": \"2026-11-07\", \"epss\": 0.02727, \"percentile\": 0.86149}"},{"alert":0,"cve":"CVE-2021-38645","id":11570,"kind":"epss","observed_at":1793982001,"payload":"{\"date\": \"2026-11-06\", \"epss\": 0.02727, \"percentile\": 0.8613}"},{"alert":0,"cve":"CVE-2021-38645","id":9556,"kind":"epss","observed_at":1793938800,"payload":"{\"date\": \"2026-11-05\", \"epss\": 0.02727, \"percentile\": 0.86121}"},{"alert":1,"cve":"CVE-2021-38645","id":8400,"kind":"cna","observed_at":1793852400,"payload":"{\"containers\": {\"adp\": [{\"providerMetadata\": {\"dateUpdated\": \"2024-08-04T01:51:18.959Z\", \"orgId\": \"af854a3a-2127-422b-91ae-364da2661108\", \"shortName\": \"CVE\"}, \"references\": [{\"tags\": [\"x_refsource_MISC\", \"x_transferred\"], \"url\": \"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-38645\"}], \"title\": \"CVE Program Container\"}, {\"metrics\": [{\"other\": {\"content\": {\"id\": \"CVE-2021-38645\", \"options\": [{\"Exploitation\": \"active\"}, {\"Automatable\": \"no\"}, {\"Technical Impact\": \"total\"}], \"role\": \"CISA Coordinator\", \"timestamp\": \"2025-02-04T15:43:58.641391Z\", \"version\": \"2.0.3\"}, \"type\": \"ssvc\"}}, {\"other\": {\"content\": {\"dateAdded\": \"2021-11-03\", \"reference\": \"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-38645\"}, \"type\": \"kev\"}}], \"problemTypes\": [{\"descriptions\": [{\"description\": \"CWE-noinfo Not enough information\", \"lang\": \"en\", \"type\": \"CWE\"}]}], \"providerMetadata\": {\"dateUpdated\": \"2025-10-21T23:25:33.443Z\", \"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\"}, \"references\": [{\"tags\": [\"government-resource\"], \"url\": \"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-38645\"}], \"timeline\": [{\"lang\": \"en\", \"time\": \"2021-11-03T00:00:00.000Z\", \"value\": \"CVE-2021-38645 added to CISA KEV\"}], \"title\": \"CISA ADP Vulnrichment\"}], \"cna\": {\"affected\": [{\"product\": \"Azure Automation State Configuration, DSC Extension\", \"vendor\": \"Microsoft\", \"versions\": [{\"lessThan\": \"DSC Agent versions: 2.71.1.25, 2.70.0.30, 3.0.0.3\", \"status\": \"affected\", \"version\": \"2.0.0\", \"versionType\": \"custom\"}]}, {\"product\": \"Azure Automation Update Management\", \"vendor\": \"Microsoft\", \"versions\": [{\"lessThan\": \"OMS Agent for Linux GA v1.13.40-0\", \"status\": \"affected\", \"version\": \"1.0.0\", \"versionType\": \"custom\"}]}, {\"product\": \"Azure Diagnostics (LAD)\", \"vendor\": \"Microsoft\", \"versions\": [{\"lessThan\": \"LAD v4.0.13 and LAD v3.0.135\", \"status\": \"affected\", \"version\": \"3.0.0\", \"versionType\": \"custom\"}]}, {\"product\": \"Azure Security Center\", \"vendor\": \"Microsoft\", \"versions\": [{\"lessThan\": \"OMS Agent for Linux GA v1.13.40-0\", \"status\": \"affected\", \"version\": \"1.0.0\", \"versionType\": \"custom\"}]}, {\"product\": \"Azure Sentinel\", \"vendor\": \"Microsoft\", \"versions\": [{\"lessThan\": \"OMS Agent for Linux GA v1.13.40-0\", \"status\": \"affected\", \"version\": \"1.0.0\", \"versionType\": \"custom\"}]}, {\"product\": \"Azure Stack Hub\", \"vendor\": \"Microsoft\", \"versions\": [{\"lessThan\": \"Monitor, Update and Config Mgmnt 1.14.01\", \"status\": \"affected\", \"version\": \"1.0.0\", \"versionType\": \"custom\"}]}, {\"product\": \"Container Monitoring Solution\", \"vendor\": \"Microsoft\", \"versions\": [{\"lessThan\": \"publication\", \"status\": \"affected\", \"version\": \"1.0.0\", \"versionType\": \"custom\"}]}, {\"product\": \"Log Analytics Agent\", \"vendor\": \"Microsoft\", \"versions\": [{\"lessThan\": \"OMS Agent for Linux GA v1.13.40-0\", \"status\": \"affected\", \"version\": \"1.0.0\", \"versionType\": \"custom\"}]}, {\"product\": \"Open Management Infrastructure\", \"vendor\": \"Microsoft\", \"versions\": [{\"lessThan\": \"OMI Version 1.6.8-1\", \"status\": \"affected\", \"version\": \"16.0\", \"versionType\": \"custom\"}]}, {\"product\": \"System Center Operations Manager (SCOM)\", \"vendor\": \"Microsoft\", \"versions\": [{\"lessThan\": \"OMI version: 1.6.8-1\", \"status\": \"affected\", \"version\": \"1.0.0\", \"versionType\": \"custom\"}]}], \"cpeApplicability\": [{\"nodes\": [{\"cpeMatch\": [{\"criteria\": \"cpe:2.3:a:microsoft:open_management_infrastructure:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"OMI Version 1.6.8-1\", \"versionStartIncluding\": \"16.0\", \"vulnerable\": true}, {\"criteria\": \"cpe:2.3:a:microsoft:system_center_operations_manager:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"OMI version: 1.6.8-1\", \"versionStartIncluding\": \"1.0.0\", \"vulnerable\": true}, {\"criteria\": \"cpe:2.3:a:microsoft:azure_automation_state_configuration:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"DSC Agent versions: 2.71.1.25, 2.70.0.30, 3.0.0.3\", \"versionStartIncluding\": \"2.0.0\", \"vulnerable\": true}, {\"criteria\": \"cpe:2.3:a:microsoft:azure_automation_update_management:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"OMS Agent for Linux GA v1.13.40-0\", \"versionStartIncluding\": \"1.0.0\", \"vulnerable\": true}, {\"criteria\": \"cpe:2.3:a:microsoft:log_analytics_agent:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"OMS Agent for Linux GA v1.13.40-0\", \"versionStartIncluding\": \"1.0.0\", \"vulnerable\": true}, {\"criteria\": \"cpe:2.3:a:microsoft:azure_diagnostics:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"LAD v4.0.13 and LAD v3.0.135\", \"versionStartIncluding\": \"3.0.0\", \"vulnerable\": true}, {\"criteria\": \"cpe:2.3:a:microsoft:container_monitoring_solution:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"publication\", \"versionStartIncluding\": \"1.0.0\", \"vulnerable\": true}, {\"criteria\": \"cpe:2.3:a:microsoft:azure_security_center:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"OMS Agent for Linux GA v1.13.40-0\", \"versionStartIncluding\": \"1.0.0\", \"vulnerable\": true}, {\"criteria\": \"cpe:2.3:a:microsoft:azure_sentinel:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"OMS Agent for Linux GA v1.13.40-0\", \"versionStartIncluding\": \"1.0.0\", \"vulnerable\": true}, {\"criteria\": \"cpe:2.3:a:microsoft:azure_stack_hub:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"Monitor, Update and Config Mgmnt 1.14.01\", \"versionStartIncluding\": \"1.0.0\", \"vulnerable\": true}], \"negate\": false, \"operator\": \"OR\"}]}], \"datePublic\": \"2021-09-14T14:00:00.000Z\", \"descriptions\": [{\"lang\": \"en-US\", \"value\": \"Open Management Infrastructure Elevation of Privilege Vulnerability\"}], \"metrics\": [{\"cvssV3_1\": {\"baseScore\": 7.8, \"baseSeverity\": \"HIGH\", \"vectorString\": \"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C\", \"version\": \"3.1\"}, \"format\": \"CVSS\", \"scenarios\": [{\"lang\": \"en-US\", \"value\": \"GENERAL\"}]}], \"problemTypes\": [{\"descriptions\": [{\"description\": \"Elevation of Privilege\", \"lang\": \"en-US\", \"type\": \"Impact\"}]}], \"providerMetadata\": {\"dateUpdated\": \"2026-08-10T15:10:53.641Z\", \"orgId\": \"f38d906d-7342-40ea-92c1-6c4a2c6478c8\", \"shortName\": \"microsoft\"}, \"references\": [{\"name\": \"Open Management Infrastructure Elevation of Privilege Vulnerability\", \"tags\": [\"vendor-advisory\", \"patch\"], \"url\": \"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-38645\"}], \"title\": \"Open Management Infrastructure Elevation of Privilege Vulnerability\"}}, \"cveMetadata\": {\"assignerOrgId\": \"f38d906d-7342-40ea-92c1-6c4a2c6478c8\", \"assignerShortName\": \"microsoft\", \"cveId\": \"CVE-2021-38645\", \"datePublished\": \"2021-09-15T11:24:05.000Z\", \"dateReserved\": \"2021-08-13T00:00:00.000Z\", \"dateUpdated\": \"2026-08-10T15:10:53.641Z\", \"state\": \"PUBLISHED\"}, \"dataType\": \"CVE_RECORD\", \"dataVersion\": \"5.2\"}"},{"alert":0,"cve":"CVE-2021-38645","id":7104,"kind":"epss","observed_at":1793809200,"payload":"{\"date\": \"2026-11-04\", \"epss\": 0.02727, \"percentile\": 0.86109}"},{"alert":0,"cve":"CVE-2021-38645","id":4881,"kind":"epss","observed_at":1793722800,"payload":"{\"date\": \"2026-11-03\", \"epss\": 0.02727, \"percentile\": 0.86086}"},{"alert":0,"cve":"CVE-2021-38645","id":2663,"kind":"epss","observed_at":1793665375,"payload":"{\"date\": \"2026-11-02\", \"epss\": 0.02727, \"percentile\": 0.86067}"},{"alert":1,"cve":"CVE-2021-38645","id":1623,"kind":"kev","observed_at":1793665375,"payload":"{\"cveID\": \"CVE-2021-38645\", \"cwes\": [], \"dateAdded\": \"2021-11-03\", \"dueDate\": \"2021-11-17\", \"forensicTriage\": \"No\", \"knownRansomwareCampaignUse\": \"Unknown\", \"notes\": \"https://nvd.nist.gov/vuln/detail/CVE-2021-38645\", \"product\": \"Open Management Infrastructure (OMI)\", \"requiredAction\": \"Apply updates per vendor instructions.\", \"shortDescription\": \"Microsoft Open Management Infrastructure (OMI) within Azure VM Management Extensions contains an unspecified vulnerability that allows for privilege escalation.\", \"vendorProject\": \"Microsoft\", \"vulnerabilityName\": \"Microsoft Open Management Infrastructure (OMI) Privilege Escalation Vulnerability\"}"}],"record":{"affected":[{"product":"Azure Automation State Configuration, DSC Extension","vendor":"Microsoft","versions":[{"lessThan":"DSC Agent versions: 2.71.1.25, 2.70.0.30, 3.0.0.3","status":"affected","version":"2.0.0","versionType":"custom"}]},{"product":"Azure Automation Update Management","vendor":"Microsoft","versions":[{"lessThan":"OMS Agent for Linux GA v1.13.40-0","status":"affected","version":"1.0.0","versionType":"custom"}]},{"product":"Azure Diagnostics (LAD)","vendor":"Microsoft","versions":[{"lessThan":"LAD v4.0.13 and LAD v3.0.135","status":"affected","version":"3.0.0","versionType":"custom"}]},{"product":"Azure Security Center","vendor":"Microsoft","versions":[{"lessThan":"OMS Agent for Linux GA v1.13.40-0","status":"affected","version":"1.0.0","versionType":"custom"}]},{"product":"Azure Sentinel","vendor":"Microsoft","versions":[{"lessThan":"OMS Agent for Linux GA v1.13.40-0","status":"affected","version":"1.0.0","versionType":"custom"}]},{"product":"Azure Stack Hub","vendor":"Microsoft","versions":[{"lessThan":"Monitor, Update and Config Mgmnt 1.14.01","status":"affected","version":"1.0.0","versionType":"custom"}]},{"product":"Container Monitoring Solution","vendor":"Microsoft","versions":[{"lessThan":"publication","status":"affected","version":"1.0.0","versionType":"custom"}]},{"product":"Log Analytics Agent","vendor":"Microsoft","versions":[{"lessThan":"OMS Agent for Linux GA v1.13.40-0","status":"affected","version":"1.0.0","versionType":"custom"}]},{"product":"Open Management Infrastructure","vendor":"Microsoft","versions":[{"lessThan":"OMI Version 1.6.8-1","status":"affected","version":"16.0","versionType":"custom"}]},{"product":"System Center Operations Manager (SCOM)","vendor":"Microsoft","versions":[{"lessThan":"OMI version: 1.6.8-1","status":"affected","version":"1.0.0","versionType":"custom"}]}],"cna":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-04T01:51:18.959Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"tags":["x_refsource_MISC","x_transferred"],"url":"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-38645"}],"title":"CVE Program Container"},{"metrics":[{"other":{"content":{"id":"CVE-2021-38645","options":[{"Exploitation":"active"},{"Automatable":"no"},{"Technical Impact":"total"}],"role":"CISA Coordinator","timestamp":"2025-02-04T15:43:58.641391Z","version":"2.0.3"},"type":"ssvc"}},{"other":{"content":{"dateAdded":"2021-11-03","reference":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-38645"},"type":"kev"}}],"problemTypes":[{"descriptions":[{"description":"CWE-noinfo Not enough information","lang":"en","type":"CWE"}]}],"providerMetadata":{"dateUpdated":"2025-10-21T23:25:33.443Z","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP"},"references":[{"tags":["government-resource"],"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-38645"}],"timeline":[{"lang":"en","time":"2021-11-03T00:00:00.000Z","value":"CVE-2021-38645 added to CISA KEV"}],"title":"CISA ADP Vulnrichment"}],"cna":{"affected":[{"product":"Azure Automation State Configuration, DSC Extension","vendor":"Microsoft","versions":[{"lessThan":"DSC Agent versions: 2.71.1.25, 2.70.0.30, 3.0.0.3","status":"affected","version":"2.0.0","versionType":"custom"}]},{"product":"Azure Automation Update Management","vendor":"Microsoft","versions":[{"lessThan":"OMS Agent for Linux GA v1.13.40-0","status":"affected","version":"1.0.0","versionType":"custom"}]},{"product":"Azure Diagnostics (LAD)","vendor":"Microsoft","versions":[{"lessThan":"LAD v4.0.13 and LAD v3.0.135","status":"affected","version":"3.0.0","versionType":"custom"}]},{"product":"Azure Security Center","vendor":"Microsoft","versions":[{"lessThan":"OMS Agent for Linux GA v1.13.40-0","status":"affected","version":"1.0.0","versionType":"custom"}]},{"product":"Azure Sentinel","vendor":"Microsoft","versions":[{"lessThan":"OMS Agent for Linux GA v1.13.40-0","status":"affected","version":"1.0.0","versionType":"custom"}]},{"product":"Azure Stack Hub","vendor":"Microsoft","versions":[{"lessThan":"Monitor, Update and Config Mgmnt 1.14.01","status":"affected","version":"1.0.0","versionType":"custom"}]},{"product":"Container Monitoring Solution","vendor":"Microsoft","versions":[{"lessThan":"publication","status":"affected","version":"1.0.0","versionType":"custom"}]},{"product":"Log Analytics Agent","vendor":"Microsoft","versions":[{"lessThan":"OMS Agent for Linux GA v1.13.40-0","status":"affected","version":"1.0.0","versionType":"custom"}]},{"product":"Open Management Infrastructure","vendor":"Microsoft","versions":[{"lessThan":"OMI Version 1.6.8-1","status":"affected","version":"16.0","versionType":"custom"}]},{"product":"System Center Operations Manager (SCOM)","vendor":"Microsoft","versions":[{"lessThan":"OMI version: 1.6.8-1","status":"affected","version":"1.0.0","versionType":"custom"}]}],"cpeApplicability":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:microsoft:open_management_infrastructure:*:*:*:*:*:*:*:*","versionEndExcluding":"OMI Version 1.6.8-1","versionStartIncluding":"16.0","vulnerable":true},{"criteria":"cpe:2.3:a:microsoft:system_center_operations_manager:*:*:*:*:*:*:*:*","versionEndExcluding":"OMI version: 1.6.8-1","versionStartIncluding":"1.0.0","vulnerable":true},{"criteria":"cpe:2.3:a:microsoft:azure_automation_state_configuration:*:*:*:*:*:*:*:*","versionEndExcluding":"DSC Agent versions: 2.71.1.25, 2.70.0.30, 3.0.0.3","versionStartIncluding":"2.0.0","vulnerable":true},{"criteria":"cpe:2.3:a:microsoft:azure_automation_update_management:*:*:*:*:*:*:*:*","versionEndExcluding":"OMS Agent for Linux GA v1.13.40-0","versionStartIncluding":"1.0.0","vulnerable":true},{"criteria":"cpe:2.3:a:microsoft:log_analytics_agent:*:*:*:*:*:*:*:*","versionEndExcluding":"OMS Agent for Linux GA v1.13.40-0","versionStartIncluding":"1.0.0","vulnerable":true},{"criteria":"cpe:2.3:a:microsoft:azure_diagnostics:*:*:*:*:*:*:*:*","versionEndExcluding":"LAD v4.0.13 and LAD v3.0.135","versionStartIncluding":"3.0.0","vulnerable":true},{"criteria":"cpe:2.3:a:microsoft:container_monitoring_solution:*:*:*:*:*:*:*:*","versionEndExcluding":"publication","versionStartIncluding":"1.0.0","vulnerable":true},{"criteria":"cpe:2.3:a:microsoft:azure_security_center:*:*:*:*:*:*:*:*","versionEndExcluding":"OMS Agent for Linux GA v1.13.40-0","versionStartIncluding":"1.0.0","vulnerable":true},{"criteria":"cpe:2.3:a:microsoft:azure_sentinel:*:*:*:*:*:*:*:*","versionEndExcluding":"OMS Agent for Linux GA v1.13.40-0","versionStartIncluding":"1.0.0","vulnerable":true},{"criteria":"cpe:2.3:a:microsoft:azure_stack_hub:*:*:*:*:*:*:*:*","versionEndExcluding":"Monitor, Update and Config Mgmnt 1.14.01","versionStartIncluding":"1.0.0","vulnerable":true}],"negate":false,"operator":"OR"}]}],"datePublic":"2021-09-14T14:00:00.000Z","descriptions":[{"lang":"en-US","value":"Open Management Infrastructure Elevation of Privilege Vulnerability"}],"metrics":[{"cvssV3_1":{"baseScore":7.8,"baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","version":"3.1"},"format":"CVSS","scenarios":[{"lang":"en-US","value":"GENERAL"}]}],"problemTypes":[{"descriptions":[{"description":"Elevation of Privilege","lang":"en-US","type":"Impact"}]}],"providerMetadata":{"dateUpdated":"2026-08-10T15:10:53.641Z","orgId":"f38d906d-7342-40ea-92c1-6c4a2c6478c8","shortName":"microsoft"},"references":[{"name":"Open Management Infrastructure Elevation of Privilege Vulnerability","tags":["vendor-advisory","patch"],"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-38645"}],"title":"Open Management Infrastructure Elevation of Privilege Vulnerability"}},"cveMetadata":{"assignerOrgId":"f38d906d-7342-40ea-92c1-6c4a2c6478c8","assignerShortName":"microsoft","cveId":"CVE-2021-38645","datePublished":"2021-09-15T11:24:05.000Z","dateReserved":"2021-08-13T00:00:00.000Z","dateUpdated":"2026-08-10T15:10:53.641Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.2"},"cna_checked":1794349204,"cve":"CVE-2021-38645","description":"Open Management Infrastructure Elevation of Privilege Vulnerability","epss":{"date":"2026-11-12","epss":0.02727,"percentile":0.8627},"epss_checked":1794522003,"first_seen":1793665375,"kev":{"cveID":"CVE-2021-38645","cwes":[],"dateAdded":"2021-11-03","dueDate":"2021-11-17","forensicTriage":"No","knownRansomwareCampaignUse":"Unknown","notes":"https://nvd.nist.gov/vuln/detail/CVE-2021-38645","product":"Open Management Infrastructure (OMI)","requiredAction":"Apply updates per vendor instructions.","shortDescription":"Microsoft Open Management Infrastructure (OMI) within Azure VM Management Extensions contains an unspecified vulnerability that allows for privilege escalation.","vendorProject":"Microsoft","vulnerabilityName":"Microsoft Open Management Infrastructure (OMI) Privilege Escalation Vulnerability"},"kev_checked":1794522003,"products":"Microsoft Azure Automation State Configuration, DSC Extension, Microsoft Azure Automation Update Management, Microsoft Azure Diagnostics (LAD), Microsoft Azure Security Center, Microsoft Azure Sentinel, Microsoft Azure Stack Hub, Microsoft Container Monitoring Solution, Microsoft Log Analytics Agent, Microsoft Open Management Infrastructure, Microsoft System Center Operations Manager (SCOM)","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-38645","https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-38645","https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-38645"],"score":{"baseScore":7.8,"baseSeverity":"HIGH","provider":"microsoft","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","version":"3.1"},"solutions":"","state":"PUBLISHED","title":"Open Management Infrastructure Elevation of Privilege Vulnerability","updated_at":1794500401,"workarounds":""},"sources":[]}