|
196851
|
5.3 |
MEDIUM
Network
|
vmware
|
vcenter_server cloud_foundation
|
vCenter Server contains an unauthenticated API endpoint vulnerability in vCenter Server Content Library. A malicious actor with network access to port 443 on vCenter Server may exploit this issue to …
|
NVD-CWE-noinfo
|
CVE-2021-22011
|
2024-11-21 14:49 |
2021-09-23 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
196852
|
7.5 |
HIGH
Network
|
vmware
|
vcenter_server cloud_foundation
|
The vCenter Server contains a denial-of-service vulnerability in VPXD service. A malicious actor with network access to port 443 on vCenter Server may exploit this issue to create a denial of service…
|
CWE-400
Uncontrolled Resource Consumption
|
CVE-2021-22010
|
2024-11-21 14:49 |
2021-09-23 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
196853
|
7.5 |
HIGH
Network
|
vmware
|
vcenter_server cloud_foundation
|
The vCenter Server contains multiple denial-of-service vulnerabilities in VAPI (vCenter API) service. A malicious actor with network access to port 443 on vCenter Server may exploit these issues to c…
|
CWE-668
Exposure of Resource to Wrong Sphere
|
CVE-2021-22009
|
2024-11-21 14:49 |
2021-09-23 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
196854
|
7.5 |
HIGH
Network
|
vmware
|
vcenter_server cloud_foundation
|
The vCenter Server contains an information disclosure vulnerability in VAPI (vCenter API) service. A malicious actor with network access to port 443 on vCenter Server may exploit this issue by sendin…
|
NVD-CWE-noinfo
|
CVE-2021-22008
|
2024-11-21 14:49 |
2021-09-23 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
196855
|
5.5 |
MEDIUM
Local
|
vmware
|
vcenter_server cloud_foundation
|
The vCenter Server contains a local information disclosure vulnerability in the Analytics service. An authenticated user with non-administrative privilege may exploit this issue to gain access to sen…
|
NVD-CWE-noinfo
|
CVE-2021-22007
|
2024-11-21 14:49 |
2021-09-23 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
196856
|
7.5 |
HIGH
Network
|
vmware
|
vcenter_server cloud_foundation
|
The vCenter Server contains a reverse proxy bypass vulnerability due to the way the endpoints handle the URI. A malicious actor with network access to port 443 on vCenter Server may exploit this issu…
|
NVD-CWE-noinfo
|
CVE-2021-22006
|
2024-11-21 14:49 |
2021-09-23 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
196857
|
9.8 |
CRITICAL
Network
|
vmware
|
vcenter_server cloud_foundation
|
The vCenter Server contains an arbitrary file upload vulnerability in the Analytics service. A malicious actor with network access to port 443 on vCenter Server may exploit this issue to execute code…
|
CWE-22
Path Traversal
|
CVE-2021-22005
|
2024-11-21 14:49 |
2021-09-23 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
196858
|
6.5 |
MEDIUM
Network
|
vmware
|
vcenter_server cloud_foundation
|
The vCenter Server contains an SSRF (Server Side Request Forgery) vulnerability due to improper validation of URLs in vCenter Server Content Library. An authorised user with access to content library…
|
CWE-918
Server-Side Request Forgery (SSRF)
|
CVE-2021-21993
|
2024-11-21 14:49 |
2021-09-23 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
196859
|
6.5 |
MEDIUM
Network
|
vmware
|
vcenter_server cloud_foundation
|
The vCenter Server contains a denial-of-service vulnerability due to improper XML entity parsing. A malicious actor with non-administrative user access to the vCenter Server vSphere Client (HTML5) or…
|
NVD-CWE-noinfo
|
CVE-2021-21992
|
2024-11-21 14:49 |
2021-09-23 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
196860
|
7.8 |
HIGH
Local
|
vmware
|
vcenter_server cloud_foundation
|
The vCenter Server contains a local privilege escalation vulnerability due to the way it handles session tokens. A malicious actor with non-administrative user access on vCenter Server host may explo…
|
NVD-CWE-noinfo
|
CVE-2021-21991
|
2024-11-21 14:49 |
2021-09-23 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|