CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2021-09-23
VMware vCenter Server Analytics Service Arbitrary File Upload and Remote Code Execution Vulnerability (CVE-2021-22005) Security Advisory
[Affected Scope] VMware vCenter Server versions 6.7 and 7.0 running the Analytics (CEIP) service
[Impact] Unauthenticated attackers with network access to port 443/TCP can upload arbitrary files and execute remote code with system privileges
[Mitigation] Apply official vendor patches immediately, or implement the temporary workaround to disable the vulnerable Analytics endpoint