Skip to content
Fencer Intel

All · VMware

Newest first, late arrivals on top. Also a feed.

  1. 5.5
    CVE-2021-22020 The vCenter Server contains a denial-of-service vulnerability in the Analytics service.
    VMware
  2. 7.5
    CVE-2021-22019 The vCenter Server contains a denial-of-service vulnerability in VAPI (vCenter API) service.
    VMware
    EPSS 1.6% chance of exploitation in 30 days, percentile 76%
  3. 6.5
    CVE-2021-22018 The vCenter Server contains an arbitrary file deletion vulnerability in a VMware vSphere Life-cycle Manager plug-in.
    VMware
    EPSS 1.1% chance of exploitation in 30 days, percentile 65%
  4. 5.3
    CVE-2021-22017 Rhttproxy as used in vCenter Server contains a vulnerability due to improper implementation of URI normalization.
    VMware
    kev EPSS 49.2% chance of exploitation in 30 days, percentile 98%
  5. 6.1
    CVE-2021-22016 The vCenter Server contains a reflected cross-site scripting vulnerability due to a lack of input sanitization.
    VMware
  6. 7.2
    CVE-2021-22014 The vCenter Server contains an authenticated code execution vulnerability in VAMI (Virtual Appliance Management Infrastructure).
    VMware
    EPSS 1.5% chance of exploitation in 30 days, percentile 75%
  7. 7.5
    CVE-2021-22013 The vCenter Server contains a file path traversal vulnerability leading to information disclosure in the appliance management API.
    VMware
    EPSS 1.7% chance of exploitation in 30 days, percentile 76%
  8. 7.5
    CVE-2021-22012 The vCenter Server contains an information disclosure vulnerability due to an unauthenticated appliance management API.
    VMware
    EPSS 1.4% chance of exploitation in 30 days, percentile 72%
  9. 5.3
    CVE-2021-22011 vCenter Server contains an unauthenticated API endpoint vulnerability in vCenter Server Content Library.
    VMware
    EPSS 1.1% chance of exploitation in 30 days, percentile 65%
  10. 7.5
    CVE-2021-22010 The vCenter Server contains a denial-of-service vulnerability in VPXD service.
    VMware
    EPSS 1.7% chance of exploitation in 30 days, percentile 77%
  11. 7.5
    CVE-2021-22009 The vCenter Server contains multiple denial-of-service vulnerabilities in VAPI (vCenter API) service.
    VMware
    EPSS 1.4% chance of exploitation in 30 days, percentile 72%
  12. 7.5
    CVE-2021-22008 The vCenter Server contains an information disclosure vulnerability in VAPI (vCenter API) service.
    VMware
    EPSS 1.7% chance of exploitation in 30 days, percentile 77%
  13. 5.5
    CVE-2021-22007 The vCenter Server contains a local information disclosure vulnerability in the Analytics service.
    VMware
  14. 7.5
    CVE-2021-22006 The vCenter Server contains a reverse proxy bypass vulnerability due to the way the endpoints handle the URI.
    VMware
    EPSS 6.6% chance of exploitation in 30 days, percentile 93%
  15. 9.8
    CVE-2021-22005 The vCenter Server contains an arbitrary file upload vulnerability in the Analytics service.
    VMware
    kev+ ransomware 1 public exploit EPSS 100.0% chance of exploitation in 30 days, percentile 99.9%
  16. 6.5
    CVE-2021-21993 The vCenter Server contains an SSRF (Server Side Request Forgery) vulnerability due to improper validation of URLs in vCenter Server Conten…
    VMware
  17. 7.8
    CVE-2021-22015 The vCenter Server contains multiple local privilege escalation vulnerabilities due to improper permissions of files and directories.
    VMware
    1 public exploit EPSS 1.9% chance of exploitation in 30 days, percentile 80%
  18. 6.5
    CVE-2021-21992 The vCenter Server contains a denial-of-service vulnerability due to improper XML entity parsing.
    VMware
  19. 7.8
    CVE-2021-21991 The vCenter Server contains a local privilege escalation vulnerability due to the way it handles session tokens.
    VMware
  20. 8.4
    CVE-2020-3960 VMware ESXi (6.7 before ESXi670-202006401-SG and 6.5 before ESXi650-202005401-SG), Workstation (15.x before 15.5.5), and Fusion (11.x befor…
    VMware
  21. 7.5
    CVE-2021-22003 VMware Workspace ONE Access and Identity Manager, unintentionally provide a login interface on port 7443.
    VMware
  22. 9.8
    CVE-2021-22002 VMware Workspace ONE Access and Identity Manager, allow the /cfg web app and diagnostic endpoints, on port 8443, to be accessed via port 44…
    VMware
    EPSS 1.2% chance of exploitation in 30 days, percentile 68%
  23. 5.4
    CVE-2021-22021 VMware vRealize Log Insight (8.x prior to 8.4) contains a Cross Site Scripting (XSS) vulnerability due to improper user input validation.
    VMware
  24. 7.5
    CVE-2021-22025 The vRealize Operations Manager API (8.x prior to 8.5) contains a broken access control vulnerability leading to unauthenticated API access.
    VMware
  25. 7.5
    CVE-2021-22027 The vRealize Operations Manager API (8.x prior to 8.5) contains a Server Side Request Forgery in an end point.
    VMware
    EPSS 1.2% chance of exploitation in 30 days, percentile 67%
  26. 7.5
    CVE-2021-22026 The vRealize Operations Manager API (8.x prior to 8.5) contains a Server Side Request Forgery in an end point.
    VMware
    EPSS 1.1% chance of exploitation in 30 days, percentile 66%
  27. 7.5
    CVE-2021-22024 The vRealize Operations Manager API (8.x prior to 8.5) contains an arbitrary log-file read vulnerability.
    VMware
    EPSS 1.0% chance of exploitation in 30 days, percentile 64%
  28. 7.2
    CVE-2021-22023 The vRealize Operations Manager API (8.x prior to 8.5) has insecure object reference vulnerability.
    VMware
  29. 4.9
    CVE-2021-22022 The vRealize Operations Manager API (8.x prior to 8.5) contains an arbitrary file read vulnerability.
    VMware
    EPSS 1.1% chance of exploitation in 30 days, percentile 66%
  30. 7.5
    CVE-2021-21995 OpenSLP as used in ESXi has a denial-of-service vulnerability due a heap out-of-bounds read issue.
    VMware