VMware VCenter Server 6.5

The vCenter Server contains a denial-of-service vulnerability in the content library service. A malicious actor with network access to port 443 on vCenter Server may exploit this issue to trigger a denial-of-service condition by sending a specially crafted header.

Published: 2022-12-13T00:00:00.000Z
Updated: 2025-04-22T03:26:59.398Z

The vCenter Server contains an information disclosure vulnerability due to the logging of credentials in plaintext. A malicious actor with access to a workstation that invoked a vCenter Server Appliance ISO operation (Install/Upgrade/Migrate/Restore) can access plaintext passwords used during that operation.

Published: 2022-12-13T00:00:00.000Z
Updated: 2025-04-22T15:50:24.431Z

The vCenter Server contains an unsafe deserialisation vulnerability in the PSC (Platform services controller). A malicious actor with admin access on vCenter server may exploit this issue to execute arbitrary code on the underlying operating system that hosts the vCenter Server.

Published: 2022-10-07T00:00:00.000Z
Updated: 2024-08-03T07:26:01.110Z

The vCenter Server contains a server-side request forgery (SSRF) vulnerability. A malicious actor with network access to 443 on the vCenter Server may exploit this issue by accessing a URL request outside of vCenter Server or accessing an internal service.

Published: 2022-07-13T18:18:58.000Z
Updated: 2024-08-03T03:28:42.512Z

The vCenter Server contains an information disclosure vulnerability due to improper permission of files. A malicious actor with non-administrative access to the vCenter Server may exploit this issue to gain access to sensitive information.

Published: 2022-03-29T17:24:33.000Z
Updated: 2025-10-21T23:15:43.268Z