VMWare vCenter Server 6.7 a

The vCenter Server contains a denial-of-service vulnerability in the content library service. A malicious actor with network access to port 443 on vCenter Server may exploit this issue to trigger a denial-of-service condition by sending a specially crafted header.

Published: 2022-12-13T00:00:00.000Z
Updated: 2025-04-22T03:26:59.398Z

The vCenter Server contains an information disclosure vulnerability due to the logging of credentials in plaintext. A malicious actor with access to a workstation that invoked a vCenter Server Appliance ISO operation (Install/Upgrade/Migrate/Restore) can access plaintext passwords used during that operation.

Published: 2022-12-13T00:00:00.000Z
Updated: 2025-04-22T15:50:24.431Z

The vCenter Server contains a server-side request forgery (SSRF) vulnerability. A malicious actor with network access to 443 on the vCenter Server may exploit this issue by accessing a URL request outside of vCenter Server or accessing an internal service.

Published: 2022-07-13T18:18:58.000Z
Updated: 2024-08-03T03:28:42.512Z

The vCenter Server contains an information disclosure vulnerability due to improper permission of files. A malicious actor with non-administrative access to the vCenter Server may exploit this issue to gain access to sensitive information.

Published: 2022-03-29T17:24:33.000Z
Updated: 2025-10-21T23:15:43.268Z

The vCenter Server contains a denial-of-service vulnerability due to improper XML entity parsing. A malicious actor with non-administrative user access to the vCenter Server vSphere Client (HTML5) or vCenter Server vSphere Web Client (FLEX/Flash) may exploit this issue to create a denial-of-service condition on the vCenter Server host.

Published: 2021-09-22T18:59:15.000Z
Updated: 2024-08-03T18:30:23.542Z