VMware vCenter Server 6.5 Update E

The vCenter Server contains a denial-of-service vulnerability in the content library service. A malicious actor with network access to port 443 on vCenter Server may exploit this issue to trigger a denial-of-service condition by sending a specially crafted header.

Published: 2022-12-13T00:00:00.000Z
Updated: 2025-04-22T03:26:59.398Z

The vCenter Server contains a server-side request forgery (SSRF) vulnerability. A malicious actor with network access to 443 on the vCenter Server may exploit this issue by accessing a URL request outside of vCenter Server or accessing an internal service.

Published: 2022-07-13T18:18:58.000Z
Updated: 2024-08-03T03:28:42.512Z

The vCenter Server contains an information disclosure vulnerability due to improper permission of files. A malicious actor with non-administrative access to the vCenter Server may exploit this issue to gain access to sensitive information.

Published: 2022-03-29T17:24:33.000Z
Updated: 2025-10-21T23:15:43.268Z

The vCenter Server contains a denial-of-service vulnerability due to improper XML entity parsing. A malicious actor with non-administrative user access to the vCenter Server vSphere Client (HTML5) or vCenter Server vSphere Web Client (FLEX/Flash) may exploit this issue to create a denial-of-service condition on the vCenter Server host.

Published: 2021-09-22T18:59:15.000Z
Updated: 2024-08-03T18:30:23.542Z

The vCenter Server contains a local privilege escalation vulnerability due to the way it handles session tokens. A malicious actor with non-administrative user access on vCenter Server host may exploit this issue to escalate privileges to Administrator on the vSphere Client (HTML5) or vCenter Server vSphere Web Client (FLEX/Flash).

Published: 2021-09-22T18:59:08.000Z
Updated: 2024-08-03T18:30:23.658Z