VMware vCenter Server 6.7 Update 3l
Approved changes feed: RSS · Atom
cpe:2.3:a:vmware:vcenter_server:6.7:update3l:*:*:*:*:*:*
part: a version: 6.7 update: update3l
| Vendor | Vmware (7bb62c7c-2241-5a0b-8dbc-5f13251fb24e) |
|---|---|
| Product | Vcenter Server (07ee07f5-6760-56ae-89f5-9d9572de30b1) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2022-31698 |
vulnerable | 2026-06-08 05:44:41.508828 |
Details available
The vCenter Server contains a denial-of-service vulnerability in the content library service. A malicious actor with network access to port 443 on vCenter Server may exploit this issue to trigger a denial-of-service condition by sending a specially crafted header.
Published: 2022-12-13T00:00:00.000Z
Updated: 2025-04-22T03:26:59.398Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-31697 |
vulnerable | 2026-06-08 05:44:41.452711 |
Details available
The vCenter Server contains an information disclosure vulnerability due to the logging of credentials in plaintext. A malicious actor with access to a workstation that invoked a vCenter Server Appliance ISO operation (Install/Upgrade/Migrate/Restore) can access plaintext passwords used during that operation.
Published: 2022-12-13T00:00:00.000Z
Updated: 2025-04-22T15:50:24.431Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-22982 |
vulnerable | 2026-06-08 05:40:55.878581 |
Details available
The vCenter Server contains a server-side request forgery (SSRF) vulnerability. A malicious actor with network access to 443 on the vCenter Server may exploit this issue by accessing a URL request outside of vCenter Server or accessing an internal service.
Published: 2022-07-13T18:18:58.000Z
Updated: 2024-08-03T03:28:42.512Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-22948 |
vulnerable | 2026-06-08 05:40:55.653273 |
Details available
The vCenter Server contains an information disclosure vulnerability due to improper permission of files. A malicious actor with non-administrative access to the vCenter Server may exploit this issue to gain access to sensitive information.
Published: 2022-03-29T17:24:33.000Z
Updated: 2025-10-21T23:15:43.268Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-21992 |
vulnerable | 2026-06-08 05:29:59.499400 |
Details available
The vCenter Server contains a denial-of-service vulnerability due to improper XML entity parsing. A malicious actor with non-administrative user access to the vCenter Server vSphere Client (HTML5) or vCenter Server vSphere Web Client (FLEX/Flash) may exploit this issue to create a denial-of-service condition on the vCenter Server host.
Published: 2021-09-22T18:59:15.000Z
Updated: 2024-08-03T18:30:23.542Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-21991 |
vulnerable | 2026-06-08 05:29:59.493403 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-21986 |
vulnerable | 2026-06-08 05:29:59.473313 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-21985 |
vulnerable | 2026-06-08 05:29:59.467389 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.