CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2021-02-24
VMware vCenter Server vSphere Client Remote Code Execution (RCE) Vulnerability Advisory (CVE-2021-21972)
[Affected Scope] VMware vCenter Server versions 7.0, 6.7, 6.5 and VMware Cloud Foundation versions 4.x, 3.x
[Impact] Unauthenticated remote attackers with network access to port 443 can execute arbitrary commands with unrestricted privileges on the underlying operating system
[Mitigation] Immediately upgrade to the patched versions or apply the official workaround to disable the vulnerable plugin