CVE-2026-20967

HIGH WAF: Medium
CVSS 8.8 Published: 2026-03-10
CWE-20

Improper input validation in System Center Operations Manager allows an authorized attacker to elevate privileges over a network.

WAF Coverage Analysis

Improper Input Validation Medium WAF Coverage

OWASP: A03:2021 Injection

920xxx - Protocol Enforcement 941xxx - XSS / XXE 942xxx - SQL Injection

Affected Software

VendorProductVersion
microsoftsystem_center_operations_manager2019
microsoftsystem_center_operations_manager2019
microsoftsystem_center_operations_manager2019
microsoftsystem_center_operations_manager2019
microsoftsystem_center_operations_manager2019
microsoftsystem_center_operations_manager2019
microsoftsystem_center_operations_manager2019
microsoftsystem_center_operations_manager2019
microsoftsystem_center_operations_manager2019
microsoftsystem_center_operations_manager2019

References

Back to CVE Database