Known vulnerabilities in vCenter Server - page 3

Vendor: VMware, Inc
Software: vCenter Server
Software CPE: cpe:2.3:a:vmware:vcenter-server:*:*:*:*:*:*:*:*
Website: https://www.vmware.com
Total vulnerabilities: 76
Public exploits: 13
Known exploited (KEV): 12
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting vCenter Server vCenter Server is affected by 76 known vulnerabilities: 7 critical, 12 high, 27 medium, 30 low Critical High Medium Low

Vulnerabilities (76)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU56801 - Improper Authentication
CVE-2021-22012		 CWE-287 Medium
No
No
 6.5 U3q 21.09.2021 SB2021092117
SB2021092918
SB2021101003
and 1 more
#VU56800 - Improper Authentication
CVE-2021-22011		 CWE-287 Medium
No
No
 6.5 U3q, 6.7 U3o, 7.0 U2d 21.09.2021 SB2021092117
SB2021092118
SB2021092918
and 3 more
#VU56798 - Resource exhaustion
CVE-2021-22009		 CWE-400 Medium
No
No
 6.5 U3q, 6.7 U3o, 7.0 U2c 21.09.2021 SB2021092117
SB2021092118
SB2021092918
and 3 more
#VU56797 - Exposure of sensitive information to an unauthorized actor
CVE-2021-22008		 CWE-200 Medium
No
No
 6.5 U3q, 6.7 U3o, 7.0 U2c 21.09.2021 SB2021092117
SB2021092118
SB2021092918
and 3 more
#VU56796 - Exposure of sensitive information to an unauthorized actor
CVE-2021-22007		 CWE-200 Low
No
No
 6.7 U3o, 7.0 U2c 21.09.2021 SB2021092117
SB2021092118
SB2021092918
and 2 more
#VU56795 - Improper Authorization
CVE-2021-22006		 CWE-285 High
Available
No
 6.7 U3o, 7.0 U2c 21.09.2021 SB2021092117
SB2021092118
SB2021092918
and 3 more
#VU56794 - Unrestricted Upload of File with Dangerous Type
CVE-2021-22005		 CWE-434 Critical
Available
Exploited
 6.7 U3o, 7.0 U2c 21.09.2021 SB2021092117
SB2021092918
SB2021101003
and 1 more
#VU56793 - Server-Side Request Forgery (SSRF)
CVE-2021-21993		 CWE-918 Medium
No
No
 6.5 U3q, 6.7 U3o, 7.0 U2c 21.09.2021 SB2021092117
SB2021092118
SB2021092918
and 3 more
#VU56792 - Improper input validation
CVE-2021-21992		 CWE-20 Medium
No
No
 6.5 U3q, 6.7 U3o, 7.0 U2c 21.09.2021 SB2021092117
SB2021092118
SB2021092918
and 3 more
#VU53596 - Improper Authentication
CVE-2021-21986		 CWE-287 Medium
No
No
 6.5 U3p, 6.7 U3n, 7.0 U2b 26.05.2021 SB2021052634
SB2021101003
SB2021120331
and 3 more
#VU53595 - Improper input validation
CVE-2021-21985		 CWE-20 Critical
Available
Exploited
 6.5 U3p, 6.7 U3n, 7.0 U2b 26.05.2021 SB2021052634
SB2021101003
SB2021120331
and 3 more
#VU50899 - Server-Side Request Forgery (SSRF)
CVE-2021-21973		 CWE-918 Medium
Available
Exploited
 6.5 U3n, 6.7 U3l, 7.0 U1c 24.02.2021 SB2021022401
SB2022102127
SB2022102128
and 2 more
#VU50898 - Improper input validation
CVE-2021-21972		 CWE-20 High
Available
Exploited
 6.5 U3n, 6.7 U3l, 7.0 U1c 24.02.2021 SB2021022401
SB2022102127
SB2022102128
and 2 more
#VU26758 - Improper Access Control
CVE-2020-3952		 CWE-284 High
Available
Exploited
 6.7 U3f 12.04.2020 SB2020041203
SB2022110115
SB2022110217
#VU21149 - Cleartext Storage of Sensitive Information
CVE-2019-5534		 CWE-312 Low
No
No
 6.0 U3j, 6.5 U3, 6.7 U3 17.09.2019 SB2019091707
#VU21148 - Cleartext Storage of Sensitive Information
CVE-2019-5532		 CWE-312 Low
No
No
 6.0 U3j, 6.5 U3, 6.7 U3 17.09.2019 SB2019091707
#VU14412 - Exposure of sensitive information to an unauthorized actor
CVE-2018-3646		 CWE-200 Low
No
No
 5.5u3j, 6.0u3h, 6.5u2c, 6.7.0d 15.08.2018 SB2018081502
SB2018081505
SB2018081508
and 36 more
#VU14411 - Exposure of sensitive information to an unauthorized actor
CVE-2018-3620		 CWE-200 Low
No
No
 - 15.08.2018 SB2018081502
SB2018081506
SB2018081508
and 35 more
#VU12914 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2018-3640		 CWE-362 Low
No
No
 - 22.05.2018 SB2018052201
SB2018052802
SB2018070908
and 8 more
#VU12911 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2018-3639		 CWE-362 Low
No
No
 - 22.05.2018 SB2018052201
SB2018052207
SB2018052208
and 142 more


Showing elements 41 - 60 out of 76