CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2021-02-24
VMware vCenter Server vSphere Client SSRF Vulnerability (CVE-2021-21973) Security Advisory
[Affected Scope] VMware vCenter Server 7.0, 6.7, 6.5 and VMware Cloud Foundation 4.x, 3.x
[Impact] Unauthenticated attackers with network access to port 443 can trigger SSRF to disclose sensitive internal information
[Mitigation] Apply official security patches immediately or implement workarounds by disabling the vulnerable plugin