Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

vmware vcenter server 7.0 vulnerabilities and exploits

(subscribe to this query)

9.8
CVSSv3
CVE-2021-22049
The vSphere Web Client (FLEX/Flash) contains an SSRF (Server Side Request Forgery) vulnerability in the vSAN Web Client (vSAN UI) plug-in. A malicious actor with network access to port 443 on vCenter Server may exploit this issue by accessing a URL request outside of vCenter...
Vmware Vcenter Server 6.5Vmware Vcenter Server 6.7Vmware Vcenter Server 7.0
7.8
CVSSv3
CVE-2021-21991
The vCenter Server contains a local privilege escalation vulnerability due to the way it handles session tokens. A malicious actor with non-administrative user access on vCenter Server host may exploit this issue to escalate privileges to Administrator on the vSphere Client...
Vmware Vcenter Server 6.5Vmware Vcenter Server 6.7Vmware Vcenter Server 7.0Vmware Cloud Foundation
5.5
CVE-2022-31697
The vCenter Server contains an information disclosure vulnerability due to the logging of credentials in plaintext. A malicious actor with access to a workstation that invoked a vCenter Server Appliance ISO operation (Install/Upgrade/Migrate/Restore) can access plaintext...
Vmware Vcenter Server 6.5Vmware Vcenter Server 6.7Vmware Vcenter Server 7.0Vmware Cloud Foundation
9.8
CVSSv3
CVE-2021-22005
The vCenter Server contains an arbitrary file upload vulnerability in the Analytics service. A malicious actor with network access to port 443 on vCenter Server may exploit this issue to execute code on vCenter Server by uploading a specially crafted file....
Vmware Cloud FoundationVmware Vcenter Server 6.5Vmware Vcenter Server 6.7Vmware Vcenter Server 7.0
5.3
CVSSv3
CVE-2021-21973
The vSphere Client (HTML5) contains an SSRF (Server Side Request Forgery) vulnerability due to improper validation of URLs in a vCenter Server plugin. A malicious actor with network access to port 443 may exploit this issue by sending a POST request to vCenter Server plugin...
Vmware Cloud FoundationVmware Vcenter Server 6.5Vmware Vcenter Server 6.7Vmware Vcenter Server 7.0
7.5
CVSSv3
CVE-2021-22019
The vCenter Server contains a denial-of-service vulnerability in VAPI (vCenter API) service. A malicious actor with network access to port 5480 on vCenter Server may exploit this issue by sending a specially crafted jsonrpc message to create a denial of service condition....
Vmware Cloud FoundationVmware Vcenter Server 6.5Vmware Vcenter Server 6.7Vmware Vcenter Server 7.0
6.5
CVSSv3
CVE-2021-21993
The vCenter Server contains an SSRF (Server Side Request Forgery) vulnerability due to improper validation of URLs in vCenter Server Content Library. An authorised user with access to content library may exploit this issue by sending a POST request to vCenter Server leading to...
Vmware Cloud FoundationVmware Vcenter Server 6.5Vmware Vcenter Server 6.7Vmware Vcenter Server 7.0
9.8
CVSSv3
CVE-2021-21986
The vSphere Client (HTML5) contains a vulnerability in a vSphere authentication mechanism for the Virtual SAN Health Check, Site Recovery, vSphere Lifecycle Manager, and VMware Cloud Director Availability plug-ins. A malicious actor with network access to port 443 on vCenter...
Vmware Vcenter Server 6.5Vmware Vcenter Server 6.7Vmware Vcenter Server 7.0Vmware Cloud Foundation
7.5
CVSSv3
CVE-2021-22008
The vCenter Server contains an information disclosure vulnerability in VAPI (vCenter API) service. A malicious actor with network access to port 443 on vCenter Server may exploit this issue by sending a specially crafted json-rpc message to gain access to sensitive information....
Vmware Vcenter Server 6.5Vmware Vcenter Server 6.7Vmware Vcenter Server 7.0Vmware Cloud Foundation
6.5
CVSSv3
CVE-2021-21992
The vCenter Server contains a denial-of-service vulnerability due to improper XML entity parsing. A malicious actor with non-administrative user access to the vCenter Server vSphere Client (HTML5) or vCenter Server vSphere Web Client (FLEX/Flash) may exploit this issue to create...
Vmware Vcenter Server 6.5Vmware Vcenter Server 6.7Vmware Vcenter Server 7.0Vmware Cloud Foundation
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
path traversalCVE-2023-21068CVE-2023-21077unspecifiedCVE-2023-21070CVE-2023-21016file upload
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook