vCenter Server vulnerabilities
3 published alerts for VMware vCenter Server.
VMware vCenter Server File Upload Vulnerability
VMware vCenter Server is listed in CISA's Known Exploited Vulnerabilities catalog (CVE-2021-22005). VMware vCenter Server contains a file upload vulnerability in the Analytics service that allows a user with network access to port 443 to execute code. CISA remediation due date: 2021-11-17. If you need help checking exposure, call (864) 335-9223.
VMware vCenter Server Improper Input Validation Vulnerability
VMware vCenter Server is listed in CISA's Known Exploited Vulnerabilities catalog (CVE-2021-21985). VMware vSphere Client contains an improper input validation vulnerability in the Virtual SAN Health Check plug-in, which is enabled by default in vCenter Server, which allows for remote code execution. CISA remediation due date: 2021-11-17. If you need help checking exposure, call (864) 335-9223.
VMware vCenter Server Remote Code Execution Vulnerability
VMware vCenter Server is listed in CISA's Known Exploited Vulnerabilities catalog (CVE-2021-21972). VMware vCenter Server vSphere Client contains a remote code execution vulnerability in a vCenter Server plugin which allows an attacker with network access to port 443 to execute commands with unrestricted privileges on the underlying operating system. CISA remediation due date: 2021-11-17. If you need help checking exposure, call (864) 335-9223.