|
196121
|
7.5 |
HIGH
Network
|
vmware
|
vcenter_server cloud_foundation
|
The vCenter Server contains a file path traversal vulnerability leading to information disclosure in the appliance management API. A malicious actor with network access to port 443 on vCenter Server …
|
CWE-22
Path Traversal
|
CVE-2021-22013
|
2024-11-21 14:49 |
2021-09-23 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
196122
|
7.5 |
HIGH
Network
|
vmware
|
vcenter_server cloud_foundation
|
The vCenter Server contains an information disclosure vulnerability due to an unauthenticated appliance management API. A malicious actor with network access to port 443 on vCenter Server may exploit…
|
CWE-306
Missing Authentication for Critical Function
|
CVE-2021-22012
|
2024-11-21 14:49 |
2021-09-23 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
196123
|
5.3 |
MEDIUM
Network
|
vmware
|
vcenter_server cloud_foundation
|
vCenter Server contains an unauthenticated API endpoint vulnerability in vCenter Server Content Library. A malicious actor with network access to port 443 on vCenter Server may exploit this issue to …
|
NVD-CWE-noinfo
|
CVE-2021-22011
|
2024-11-21 14:49 |
2021-09-23 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
196124
|
7.5 |
HIGH
Network
|
vmware
|
vcenter_server cloud_foundation
|
The vCenter Server contains a denial-of-service vulnerability in VPXD service. A malicious actor with network access to port 443 on vCenter Server may exploit this issue to create a denial of service…
|
CWE-400
Uncontrolled Resource Consumption
|
CVE-2021-22010
|
2024-11-21 14:49 |
2021-09-23 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
196125
|
7.5 |
HIGH
Network
|
vmware
|
vcenter_server cloud_foundation
|
The vCenter Server contains multiple denial-of-service vulnerabilities in VAPI (vCenter API) service. A malicious actor with network access to port 443 on vCenter Server may exploit these issues to c…
|
CWE-668
Exposure of Resource to Wrong Sphere
|
CVE-2021-22009
|
2024-11-21 14:49 |
2021-09-23 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
196126
|
7.5 |
HIGH
Network
|
vmware
|
vcenter_server cloud_foundation
|
The vCenter Server contains an information disclosure vulnerability in VAPI (vCenter API) service. A malicious actor with network access to port 443 on vCenter Server may exploit this issue by sendin…
|
NVD-CWE-noinfo
|
CVE-2021-22008
|
2024-11-21 14:49 |
2021-09-23 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
196127
|
5.5 |
MEDIUM
Local
|
vmware
|
vcenter_server cloud_foundation
|
The vCenter Server contains a local information disclosure vulnerability in the Analytics service. An authenticated user with non-administrative privilege may exploit this issue to gain access to sen…
|
NVD-CWE-noinfo
|
CVE-2021-22007
|
2024-11-21 14:49 |
2021-09-23 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
196128
|
7.5 |
HIGH
Network
|
vmware
|
vcenter_server cloud_foundation
|
The vCenter Server contains a reverse proxy bypass vulnerability due to the way the endpoints handle the URI. A malicious actor with network access to port 443 on vCenter Server may exploit this issu…
|
NVD-CWE-noinfo
|
CVE-2021-22006
|
2024-11-21 14:49 |
2021-09-23 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
196129
|
9.8 |
CRITICAL
Network
|
vmware
|
vcenter_server cloud_foundation
|
The vCenter Server contains an arbitrary file upload vulnerability in the Analytics service. A malicious actor with network access to port 443 on vCenter Server may exploit this issue to execute code…
|
CWE-22
Path Traversal
|
CVE-2021-22005
|
2024-11-21 14:49 |
2021-09-23 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
196130
|
6.5 |
MEDIUM
Network
|
vmware
|
vcenter_server cloud_foundation
|
The vCenter Server contains an SSRF (Server Side Request Forgery) vulnerability due to improper validation of URLs in vCenter Server Content Library. An authorised user with access to content library…
|
CWE-918
Server-Side Request Forgery (SSRF)
|
CVE-2021-21993
|
2024-11-21 14:49 |
2021-09-23 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|