System Center Operations Manager (Scom)
13 CVEs tracked. 4 of them are in CISA KEV.
This hub aggregates every CVE we track for System Center Operations Manager (Scom). Use it to gauge the current risk picture and drill into individual advisories.
System Center Operations Manager (Scom) CVEs per month
| Month | CVEs |
|---|---|
| 2024-10 | 0 |
| 2024-11 | 0 |
| 2024-12 | 1 |
| 2025-01 | 0 |
| 2025-02 | 0 |
| 2025-03 | 0 |
| 2025-04 | 1 |
| 2025-05 | 0 |
| 2025-06 | 0 |
| 2025-07 | 0 |
| 2025-08 | 0 |
| 2025-09 | 0 |
| 2025-10 | 0 |
| 2025-11 | 0 |
| 2025-12 | 0 |
| 2026-01 | 0 |
| 2026-02 | 0 |
| 2026-03 | 1 |
| 2026-04 | 0 |
| 2026-05 | 0 |
| 2026-06 | 0 |
| 2026-07 | 0 |
| 2026-08 | 0 |
| 2026-09 | 0 |
Severity
How the 13 CVEs score on CVSS. Severity is not exploitation: KEV is counted above.
- Critical2
- High10
- Medium1
Latest CVEs
The 13 most recently published vulnerabilities affecting System Center Operations Manager (Scom).
- CVE-2026-20967System Center Operations Manager (SCOM) Elevation of Privilege Vulnerability8.8
- CVE-2025-27743Microsoft System Center Elevation of Privilege Vulnerability7.8
- CVE-2024-43594Microsoft System Center Elevation of Privilege Vulnerability7.3
- CVE-2024-21334Open Management Infrastructure (OMI) Remote Code Execution Vulnerability9.8
- CVE-2024-21330Open Management Infrastructure (OMI) Elevation of Privilege Vulnerability7.8
- CVE-2022-29149Open Management Infrastructure (OMI) Elevation of Privilege Vulnerability7.8
- CVE-2021-41352SCOM Information Disclosure Vulnerability7.5
- CVE-2021-38649Open Management Infrastructure Elevation of Privilege Vulnerability7.0
- CVE-2021-38648Open Management Infrastructure Elevation of Privilege Vulnerability7.8
- CVE-2021-38647Open Management Infrastructure (OMI) Remote Code Execution Vulnerability9.8
- CVE-2021-38645Open Management Infrastructure Elevation of Privilege Vulnerability7.8
- CVE-2021-1728System Center Operations Manager Elevation of Privilege Vulnerability8.8
- CVE-2020-1331A spoofing vulnerability exists when System Center Operations Manager (SCOM) does not properly sanitize a specially crafted web request to an affected SCOM instance, aka 'System Center Operations M...5.4
Product grouping is registry-driven, with AI assist and human review. How it works