Vmware Vcenter Server And Vmware Cloud Foundation
Approved changes feed: RSS · Atom
cpe:2.3:a:n/a:vmware_vcenter_server_and_vmware_cloud_foundation:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | N/A (22f567d3-1203-528c-8f0e-3eb9c2f6ca78) |
|---|---|
| Product | Vmware Vcenter Server And Vmware Cloud Foundation (4b0c6d1c-32f2-56ff-b06f-e8a3dec345ac) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2022-22948 |
vulnerable | 2026-06-08 05:40:55.625472 |
Details available
The vCenter Server contains an information disclosure vulnerability due to improper permission of files. A malicious actor with non-administrative access to the vCenter Server may exploit this issue to gain access to sensitive information.
Published: 2022-03-29T17:24:33.000Z
Updated: 2025-10-21T23:15:43.268Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-22049 |
vulnerable | 2026-06-08 05:29:59.746523 |
Details available
The vSphere Web Client (FLEX/Flash) contains an SSRF (Server Side Request Forgery) vulnerability in the vSAN Web Client (vSAN UI) plug-in. A malicious actor with network access to port 443 on vCenter Server may exploit this issue by accessing a URL request outside of vCenter Server or accessing an internal service.
Published: 2021-11-24T16:32:59.000Z
Updated: 2024-08-03T18:30:24.029Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-22048 |
vulnerable | 2026-06-08 05:29:59.746104 |
Details available
The vCenter Server contains a privilege escalation vulnerability in the IWA (Integrated Windows Authentication) authentication mechanism. A malicious actor with non-administrative access to vCenter Server may exploit this issue to elevate privileges to a higher privileged group.
Published: 2021-11-10T17:50:53.000Z
Updated: 2024-08-03T18:30:23.971Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-21986 |
vulnerable | 2026-06-08 05:29:59.472377 |
Details available
The vSphere Client (HTML5) contains a vulnerability in a vSphere authentication mechanism for the Virtual SAN Health Check, Site Recovery, vSphere Lifecycle Manager, and VMware Cloud Director Availability plug-ins. A malicious actor with network access to port 443 on vCenter Server may perform actions allowed by the impacted plug-ins without authentication.
Published: 2021-05-26T14:04:35.000Z
Updated: 2024-08-03T18:30:23.588Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-21985 |
vulnerable | 2026-06-08 05:29:59.459303 |
Details available
The vSphere Client (HTML5) contains a remote code execution vulnerability due to lack of input validation in the Virtual SAN Health Check plug-in which is enabled by default in vCenter Server. A malicious actor with network access to port 443 may exploit this issue to execute commands with unrestricted privileges on the underlying operating system that hosts vCenter Server.
Published: 2021-05-26T14:04:30.000Z
Updated: 2026-08-12T03:55:45.773Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-21980 |
vulnerable | 2026-06-08 05:29:59.419282 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.