What’s Vulnerable › Vulnerabilities

CVE-2021-41352: SCOM Information Disclosure Vulnerability

• Severity: medium (CVSS 5.0 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 2.9% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2021-10-13 · updated 2026-06-17

Description

SCOM Information Disclosure Vulnerability

Affected products

• Microsoft System Center 2019 Operations Manager: 2012-r2, 2016, 2019
• Microsoft System Center 2012 R2 Operations Manager: from 7.1.0.0 before 7.1.10226.1413 — fixed in 7.1.10226.1413
• Microsoft System Center 2019 Operations Manager: from 7.2.0.0 before 7.2.12335.0 — fixed in 7.2.12335.0

How to fix

Upgrade to a fixed version: Microsoft System Center 2012 R2 Operations Manager 7.1.10226.1413; Microsoft System Center 2019 Operations Manager 7.2.12335.0. Check the vendor advisory for mitigations.

References

• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-41352
• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-41352

Get alerted when CVE-2021-41352 or the next vulnerability affects your stack