CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
VMware vCenter Server rhttproxy URI Normalization Bypass Vulnerability (CVE-2021-22017) Technical Analysis and Hardening Guide
[Affected Scope] VMware vCenter Server versions 6.5, 6.7, and 7.0 without the VMSA-2021-0020 patch applied
[Impact] An unauthenticated attacker with network access to port 443 can bypass proxy restrictions via improper URI normalization, gaining unauthorized access to internal endpoints
[Mitigation] Immediately upgrade vCenter Server to the patched versions recommended in VMware Advisory VMSA-2021-0020
F5 BIG-IP TMM URI Normalization Buffer Overflow Vulnerability (CVE-2021-22991) Technical Advisory
[Affected Scope] F5 BIG-IP versions 16.0.x, 15.1.x, 14.1.x, 13.1.x, and 12.1.x prior to patched releases
[Impact] Unauthenticated remote attackers can trigger a buffer overflow via crafted URI requests, leading to TMM Denial of Service (DoS), URL-based access control bypass, or potential Remote Code Execution (RCE)
[Mitigation] Immediately upgrade to the designated hotfix/patched versions recommended by F5, or apply temporary traffic filtering workarounds