{"uuid": "9e7366d9-e505-41b7-8e7b-77676fd64489", "vulnerability": {"vulnId": "CVE-2021-38647", "altId": []}, "gcve": {"origin_uuid": "caeb2787-0d58-4236-9039-7c86c3e566f3", "object_uuid": "9e7366d9-e505-41b7-8e7b-77676fd64489"}, "status": {"exploited": true, "status_reason": "confirmed", "status_updated_at": "2021-11-03T01:00:00+01:00"}, "timestamps": {"asserted_at": "2021-11-03T00:00:00+00:00", "recorded_at": "2026-10-02T07:08:31+00:00", "first_seen_at": "2021-11-03T00:00:00+00:00"}, "scope": {"notes": "Open Management Infrastructure (OMI) Remote Code Execution Vulnerability | Affected: Microsoft / Azure Automation State Configuration, DSC Extension, Azure Automation Update Management, Azure Diagnostics (LAD), Azure Security Center, Azure Sentinel, Azure Stack Hub, Container Monitoring Solution, Log Analytics Agent, Open Management Infrastructure, System Center Operations Manager (SCOM) | CVSS: 9.8 (CRITICAL) | EPSS: 0.99933 | Used in malware: yes | Not yet in CISA KEV: False"}, "evidence": [{"type": "public_report", "source": "previdian", "signal": "confirmed_compromise", "confidence": 0.7, "details": {"feed": "Previdian (previdian.com)", "title": "Open Management Infrastructure (OMI) Remote Code Execution Vulnerability", "cve_id": "CVE-2021-38647", "vendor": "Microsoft", "ghsa_id": "GHSA-RP2G-5HW2-Q565", "product": "Azure Automation State Configuration, DSC Extension, Azure Automation Update Management, Azure Diagnostics (LAD), Azure Security Center, Azure Sentinel, Azure Stack Hub, Container Monitoring Solution, Log Analytics Agent, Open Management Infrastructure, System Center Operations Manager (SCOM)", "added_date": "2021-11-03T00:00:00.000Z", "cvss_score": 9.8, "epss_score": 0.99933, "previous_ids": [], "cvss_severity": "CRITICAL", "virtual_patch": false, "cvss_estimated": false, "epss_percentile": 0.9997, "used_in_malware": "yes", "vulnerability_id": "CVE-2021-38647", "ahead_of_cisa_kev": null, "not_yet_in_cisa_kev": false}}], "references": [{"id": "CVE-2021-38647", "url": "https://www.cve.org/CVERecord?id=CVE-2021-38647"}, {"id": "GHSA-RP2G-5HW2-Q565", "url": "https://github.com/advisories/GHSA-RP2G-5HW2-Q565"}, {"id": "previdian", "url": "https://previdian.com/CVE-2021-38647"}]}