Approved changes feed: RSS · Atom

cpe:2.3:a:vmware:vcenter_server:6.5:update3s:*:*:*:*:*:*

part: a version: 6.5 update: update3s

VendorVmware (7bb62c7c-2241-5a0b-8dbc-5f13251fb24e)
ProductVcenter Server (07ee07f5-6760-56ae-89f5-9d9572de30b1)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-31698 vulnerable 2026-06-08 05:44:41.504190 Details available
The vCenter Server contains a denial-of-service vulnerability in the content library service. A malicious actor with network access to port 443 on vCenter Server may exploit this issue to trigger a denial-of-service condition by sending a specially crafted header.
Published: 2022-12-13T00:00:00.000Z
Updated: 2025-04-22T03:26:59.398Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-31697 vulnerable 2026-06-08 05:44:41.437271 Details available
The vCenter Server contains an information disclosure vulnerability due to the logging of credentials in plaintext. A malicious actor with access to a workstation that invoked a vCenter Server Appliance ISO operation (Install/Upgrade/Migrate/Restore) can access plaintext passwords used during that operation.
Published: 2022-12-13T00:00:00.000Z
Updated: 2025-04-22T15:50:24.431Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-31680 vulnerable 2026-06-08 05:44:41.188104 Details available
The vCenter Server contains an unsafe deserialisation vulnerability in the PSC (Platform services controller). A malicious actor with admin access on vCenter server may exploit this issue to execute arbitrary code on the underlying operating system that hosts the vCenter Server.
Published: 2022-10-07T00:00:00.000Z
Updated: 2024-08-03T07:26:01.110Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-22982 vulnerable 2026-06-08 05:40:55.877824 Details available
The vCenter Server contains a server-side request forgery (SSRF) vulnerability. A malicious actor with network access to 443 on the vCenter Server may exploit this issue by accessing a URL request outside of vCenter Server or accessing an internal service.
Published: 2022-07-13T18:18:58.000Z
Updated: 2024-08-03T03:28:42.512Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.