Approved changes feed: RSS · Atom

cpe:2.3:a:vmware:vcenter_server:6.5:f:*:*:*:*:*:*

part: a version: 6.5 update: f

VendorVmware (7bb62c7c-2241-5a0b-8dbc-5f13251fb24e)
ProductVcenter Server (07ee07f5-6760-56ae-89f5-9d9572de30b1)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-31698 vulnerable 2026-06-08 05:44:41.502668 Details available
The vCenter Server contains a denial-of-service vulnerability in the content library service. A malicious actor with network access to port 443 on vCenter Server may exploit this issue to trigger a denial-of-service condition by sending a specially crafted header.
Published: 2022-12-13T00:00:00.000Z
Updated: 2025-04-22T03:26:59.398Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-22982 vulnerable 2026-06-08 05:40:55.873207 Details available
The vCenter Server contains a server-side request forgery (SSRF) vulnerability. A malicious actor with network access to 443 on the vCenter Server may exploit this issue by accessing a URL request outside of vCenter Server or accessing an internal service.
Published: 2022-07-13T18:18:58.000Z
Updated: 2024-08-03T03:28:42.512Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-22948 vulnerable 2026-06-08 05:40:55.631590 Details available
The vCenter Server contains an information disclosure vulnerability due to improper permission of files. A malicious actor with non-administrative access to the vCenter Server may exploit this issue to gain access to sensitive information.
Published: 2022-03-29T17:24:33.000Z
Updated: 2025-10-21T23:15:43.268Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-21992 vulnerable 2026-06-08 05:29:59.498582 Details available
The vCenter Server contains a denial-of-service vulnerability due to improper XML entity parsing. A malicious actor with non-administrative user access to the vCenter Server vSphere Client (HTML5) or vCenter Server vSphere Web Client (FLEX/Flash) may exploit this issue to create a denial-of-service condition on the vCenter Server host.
Published: 2021-09-22T18:59:15.000Z
Updated: 2024-08-03T18:30:23.542Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-21991 vulnerable 2026-06-08 05:29:59.488804 Details available
The vCenter Server contains a local privilege escalation vulnerability due to the way it handles session tokens. A malicious actor with non-administrative user access on vCenter Server host may exploit this issue to escalate privileges to Administrator on the vSphere Client (HTML5) or vCenter Server vSphere Web Client (FLEX/Flash).
Published: 2021-09-22T18:59:08.000Z
Updated: 2024-08-03T18:30:23.658Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-21986 vulnerable 2026-06-08 05:29:59.472625 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-21985 vulnerable 2026-06-08 05:29:59.459655 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-21973 vulnerable 2026-06-08 05:29:59.218028 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-21972 vulnerable 2026-06-08 05:29:59.192081 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-3994 vulnerable 2026-06-08 05:25:58.617594 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-3976 vulnerable 2026-06-08 05:25:58.464175 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-5538 vulnerable 2026-06-08 05:13:59.769876 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-5537 vulnerable 2026-06-08 05:13:59.764102 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-4943 vulnerable 2026-06-08 05:09:38.592806 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.