Lucene search
+L

CVE-2021-22006

🗓️ 23 Sep 2021 11:41:13Reported by vmwareType 
cve
 cve
🔗 web.nvd.nist.gov👁 170 Views🌐 WEB

The vCenter Server contains a reverse proxy bypass vulnerability due to the way the endpoints handle the URI

Related
Detection
Affected
Refs
Paths
ReporterTitlePublishedViews
Family
gitee
Gitee
Exploit for CVE-2021-22006
14 Sep 202518:28
–gitee
githubexploit
GithubExploit
Exploit for CVE-2021-22006
26 Sep 202101:02
–githubexploit
attackerkb
attackerkb
CVE-2021-22006
23 Sep 202112:15
–attackerkb
bdu_fstec
BDU FSTEC
VMware vCenter Server Unauthorized Access
13 Oct 202100:00
–bdu_fstec
ibm
IBM Security Bulletins
Security Bulletin: Multiple Vulnerabilities in VMware vCenter affect IBM Cloud Pak System
6 May 202221:11
–ibm
circl
Circl
CVE-2021-22006
23 Sep 202116:29
–circl
cnnvd
CNNVD
Vmware VMware vCenter Server Authorization Issue Vulnerability
21 Sep 202100:00
–cnnvd
cnvd
CNVD
VMware vCenter Server Reverse Proxy Bypass Vulnerability
24 Sep 202100:00
–cnvd
cvelist
Cvelist
CVE-2021-22006
23 Sep 202111:41
–cvelist
kitploit
Kitploit
APT-Backpack
1 Nov 202609:17
–kitploit
Rows per page
NVD
Vulners
[
  {
    "product": "VMware vCenter Server, VMware Cloud Foundation",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "VMware vCenter Server(7.x before 7.0 U2c and 6.7 before 6.7 U3o) and VMware Cloud Foundation (4.x before 4.3 and 3.x before 3.10.2.2)"
      }
    ]
  }
]
ParameterPositionPathDescriptionCWE
127.0.0.1pathjndi.HRMIServerJNDI-based remote code execution via HRMIServer endpoint using JNDI payloads.
80pathjndi.HRMIServerJNDI-based remote code execution via HRMIServer endpoint using JNDI payloads.
curl dnslog.wyzxxz.cnpathjndi.HRMIServerJNDI-based remote code execution via HRMIServer endpoint using JNDI payloads.
127.0.0.1pathjndi.HLDAPServerJNDI-based RCE via LDAP-based server endpoint.
80pathjndi.HLDAPServerJNDI-based RCE via LDAP-based server endpoint.
curl dnslog.wyzxxz.cnpathjndi.HLDAPServerJNDI-based RCE via LDAP-based server endpoint.
127.0.0.1pathjndi.EvilRMIServerJNDI-based RCE via Evil RMI server payload.
80pathjndi.EvilRMIServerJNDI-based RCE via Evil RMI server payload.
curl dnslog.wyzxxz.cnpathjndi.EvilRMIServerJNDI-based RCE via Evil RMI server payload.
127.0.0.1pathjndi.LDAPRefServerJNDI-based RCE using LDAP Ref server payload vectors.
Rows per page

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

17 Jun 2026 03:36Current
7.8High risk
Vulners AI Score7.8
CVSS 25
CVSS 3.17.5
EPSS0.06611
170