Lucene search
K

CVE-2021-21973

🗓️ 24 Feb 2021 16:42:02Reported by vmwareType 
cve
 cve
🔗 web.nvd.nist.gov📰️ 10 Media mentions👁 1145 Views🌐 WEB

vSphere Client (HTML5) SSRF vulnerability in vCenter Server plugin allows information disclosure

Related
Detection
Affected
Refs
Paths
Social
NVD
Node
vmwarecloud_foundationRange3.03.10.1.2
OROROROROROROROROR
vmwarevcenter_serverMatch6.5update1d
OR
vmwarevcenter_serverMatch6.5update1e
OR
vmwarevcenter_serverMatch6.5update1g
OR
vmwarevcenter_serverMatch6.5update2
OR
vmwarevcenter_serverMatch6.5update2b
OR
vmwarevcenter_serverMatch6.5update2c
OR
vmwarevcenter_serverMatch6.5update2d
OR
vmwarevcenter_serverMatch6.5update2g
OR
vmwarevcenter_serverMatch6.5update3
OR
vmwarevcenter_serverMatch6.5update3d
OR
vmwarevcenter_serverMatch6.5update3f
OR
vmwarevcenter_serverMatch6.5update3k
OROROROROR
vmwarevcenter_serverMatch6.7update1
OR
vmwarevcenter_serverMatch6.7update1b
OR
vmwarevcenter_serverMatch6.7update2
OR
vmwarevcenter_serverMatch6.7update2a
OR
vmwarevcenter_serverMatch6.7update2c
OR
vmwarevcenter_serverMatch6.7update3
OR
vmwarevcenter_serverMatch6.7update3a
OR
vmwarevcenter_serverMatch6.7update3b
OR
vmwarevcenter_serverMatch6.7update3f
OR
vmwarevcenter_serverMatch6.7update3g
OR
vmwarevcenter_serverMatch6.7update3j
OROROROROROR
vmwarevcenter_serverMatch7.0update1
OR
vmwarevcenter_serverMatch7.0update1a
[
  {
    "product": "VMware vCenter Server",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "7.x before 7.0 U1c"
      },
      {
        "status": "affected",
        "version": "6.7 before 6.7 U3l"
      },
      {
        "status": "affected",
        "version": "6.5 before 6.5 U3n"
      }
    ]
  },
  {
    "product": "VMware Cloud Foundation",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "4.x before 4.2"
      },
      {
        "status": "affected",
        "version": "3.x before 3.10.1.2"
      }
    ]
  }
]
ParameterPositionPathDescriptionCWE
uploadFilerequest bodyui/vropspluginui/rest/services/uploadovaUnauthorized OVA upload leading to remote code execution via crafted tar with directory traversal
Rows per page

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

30 Oct 2025 20:06Current
6.7Medium risk
Vulners AI Score6.7
CVSS 25
CVSS 3.15.3
EPSS0.90385
SSVC
1145