CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
VMware vCenter Server vSAN Health Check Plugin Remote Code Execution Vulnerability Analysis and Mitigation Guide (CVE-2021-21985)
[Affected Scope] VMware vCenter Server versions 6.5, 6.7, and 7.0 with the default-enabled Virtual SAN Health Check plug-in
[Impact] An unauthenticated attacker with network access to port 443 can execute arbitrary commands with root privileges on the underlying operating system
[Mitigation] Apply official security patches immediately, or disable the vulnerable vSAN Health Check plug-in as a temporary workaround
VMware vCenter Server vSphere Client SSRF Vulnerability (CVE-2021-21973) Security Advisory
[Affected Scope] VMware vCenter Server 7.0, 6.7, 6.5 and VMware Cloud Foundation 4.x, 3.x
[Impact] Unauthenticated attackers with network access to port 443 can trigger SSRF to disclose sensitive internal information
[Mitigation] Apply official security patches immediately or implement workarounds by disabling the vulnerable plugin