Sentinel and Purview
CVE-2024-21330: Open Management Infrastructure (OMI) Elevation of Privilege Vulnerability
Open Management Infrastructure (OMI) Elevation of Privilege Vulnerability
Published
ExploitedNot in CISA KEV
Ransomware useNot reportedPer CISA
SeverityHIGHCVSS 3.1 7.8
EPSS0.99%Chance of exploitation in 30 days
Public exploitNot tracked
FixAvailable
Automatic summary from the vendor's CVE record. We haven't written a full analysis of this vulnerability yet.
Affected and fixed versions
| Product / branch | Fixed in |
|---|---|
| System Center Operations Manager (SCOM) 2019 (Unknown) 10.19 | 10.19.1253.0 or later |
| System Center Operations Manager (SCOM) 2022 (Unknown) 10.22 | 10.22.1070.0 or later |
| Azure Automation (Unknown) 1.0 | OMS Agent for Linux GA 1.19.0 or later |
| Azure Automation Update Management (Unknown) 1.0 | OMS Agent for Linux GA v1.19.0 or later |
| Azure Sentinel (Unknown) 1.0 | OMS Agent for Linux GA v1.19.0 or later |
| Container Monitoring Solution (Unknown) 1.0 | microsoft-oms-latest with full ID: sha256:855bfeb0 or later |
| Azure HDInsight (Unknown) 1.0 | omi-1.8.1-0 or later |
| Open Management Infrastructure (Unknown) 16.0 | OMI version 1.8.1-0 or later |
| Open Management Infrastructure (Unknown) 1.0 | 1.8.1-0 or later |
| Azure Security Center (Unknown) 1.0 | OMS Agent for Linux GA 1.19.0 or later |
| Log Analytics Agent (Unknown) 1.0 | OMS Agent for Linux GA v1.19.0 or later |
Always confirm against the vendor advisory, which lists every fixed hotfix.
What it is
Open Management Infrastructure (OMI) Elevation of Privilege Vulnerability
Sources
KEV status, EPSS score and vendor data refreshed automatically, last on 11 Oct 2026.