Known vulnerabilities in vCenter Server 7.0 U1c - page 2

Vendor: Broadcom

Software: vCenter Server

Version: 7.0 U1c

Software CPE: cpe:2.3:a:broadcom:vcenter-server:*:*:*:*:*:*:*:*

Website: https://www.broadcom.com/

Total vulnerabilities: 41

Public exploits: 9

Known exploited (KEV): 8

Highest CVSSv4 Score: 9.4

Vulnerabilities by Severity

Vulnerabilities (41)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU65211 - Server-Side Request Forgery (SSRF) CVE-2022-22982	CWE-918	Medium	No	No	6.5 U3t, 6.7 U3r, 7.0 U3f	12.07.2022	SB2022071255 SB2022081126
#VU61690 - Incorrect Default Permissions CVE-2022-22948	CWE-276	High	Public exploit available	Exploited	6.5 U3r, 6.7 U3p, 7.0 U3d	29.03.2022	SB2022032919 SB2022092726
#VU58816 - Improper Control of Generation of Code ('Code Injection') CVE-2021-44228	CWE-94	Critical	Public exploit available	Exploited	-	10.12.2021	SB2021121003 SB2021121101 SB2021121201 and 338 more
#VU58104 - Permissions, Privileges, and Access Controls CVE-2021-22048	CWE-264	Medium	No	No	-	10.11.2021	SB2021111014 SB2022010422
#VU56809 - Improper input validation CVE-2021-22020	CWE-20	Low	No	No	6.7 U3o, 7.0 U2c	21.09.2021	SB2021092117 SB2021092118 SB2021092918 and 2 more
#VU56808 - Improper input validation CVE-2021-22019	CWE-20	Medium	No	No	6.5 U3q, 6.7 U3o, 7.0 U2c	21.09.2021	SB2021092117 SB2021092118 SB2021092918 and 2 more
#VU56807 - Permissions, Privileges, and Access Controls CVE-2021-22018	CWE-264	Medium	No	No	7.0 U2d	21.09.2021	SB2021092117 SB2021092118 SB2021092918 and 2 more
#VU56804 - Incorrect Default Permissions CVE-2021-22015	CWE-276	Low	Public exploit available	No	6.5 U3q, 6.7 U3o, 7.0 U2c	21.09.2021	SB2021092117 SB2021092118 SB2021092918 and 2 more
#VU56803 - Improper Control of Generation of Code ('Code Injection') CVE-2021-22014	CWE-94	Low	No	No	6.5 U3q, 6.7 U3o, 7.0 U2c	21.09.2021	SB2021092117 SB2021092118 SB2021092918 and 2 more
#VU56800 - Improper Authentication CVE-2021-22011	CWE-287	Medium	No	No	6.5 U3q, 6.7 U3o, 7.0 U2d	21.09.2021	SB2021092117 SB2021092118 SB2021092918 and 3 more
#VU56799 - Resource exhaustion CVE-2021-22010	CWE-400	Medium	No	No	6.7 U3o, 7.0 U2c	21.09.2021	SB2021092117 SB2021092118 SB2021092918 and 3 more
#VU56798 - Resource exhaustion CVE-2021-22009	CWE-400	Medium	No	No	6.5 U3q, 6.7 U3o, 7.0 U2c	21.09.2021	SB2021092117 SB2021092118 SB2021092918 and 3 more
#VU56797 - Exposure of sensitive information to an unauthorized actor CVE-2021-22008	CWE-200	Medium	No	No	6.5 U3q, 6.7 U3o, 7.0 U2c	21.09.2021	SB2021092117 SB2021092118 SB2021092918 and 3 more
#VU56796 - Exposure of sensitive information to an unauthorized actor CVE-2021-22007	CWE-200	Low	No	No	6.7 U3o, 7.0 U2c	21.09.2021	SB2021092117 SB2021092118 SB2021092918 and 2 more
#VU56795 - Improper Authorization CVE-2021-22006	CWE-285	High	Public exploit available	No	6.7 U3o, 7.0 U2c	21.09.2021	SB2021092117 SB2021092118 SB2021092918 and 3 more
#VU56794 - Unrestricted Upload of File with Dangerous Type CVE-2021-22005	CWE-434	Critical	Public exploit available	Exploited	6.7 U3o, 7.0 U2c	21.09.2021	SB2021092117 SB2021092918 SB2021101003 and 1 more
#VU56793 - Server-Side Request Forgery (SSRF) CVE-2021-21993	CWE-918	Medium	No	No	6.5 U3q, 6.7 U3o, 7.0 U2c	21.09.2021	SB2021092117 SB2021092118 SB2021092918 and 3 more
#VU56792 - Improper input validation CVE-2021-21992	CWE-20	Medium	No	No	6.5 U3q, 6.7 U3o, 7.0 U2c	21.09.2021	SB2021092117 SB2021092118 SB2021092918 and 3 more
#VU56791 - Permissions, Privileges, and Access Controls CVE-2021-21991	CWE-264	Low	No	No	6.5 U3q, 6.7 U3o, 7.0 U2c	21.09.2021	SB2021092117 SB2021092118 SB2021092918 and 3 more
#VU53595 - Improper input validation CVE-2021-21985	CWE-20	Critical	Public exploit available	Exploited	6.5 U3p, 6.7 U3n, 7.0 U2b	26.05.2021	SB2021052634 SB2021101003 SB2021120331 and 3 more

Showing elements 21 - 40 out of 41

Known vulnerabilities in vCenter Server 7.0 U1c - page 2

Vulnerabilities by Severity

Vulnerabilities (41)

Please verify you're human