CVE-2022-31698

2022-12-1300:00:00

vmware

www.cve.org

vcenter server

dos

vulnerability

content library service

network access

port 443

exploit

denial-of-service

malicious actor

AI Score

5.5

Confidence

High

EPSS

0.001

Percentile

40.5%

JSON

The vCenter Server contains a denial-of-service vulnerability in the content library service. A malicious actor with network access to port 443 on vCenter Server may exploit this issue to trigger a denial-of-service condition by sending a specially crafted header.

CNA Affected

[
  {
    "vendor": "n/a",
    "product": "VMware vCenter Server, VMware Cloud Foundation",
    "versions": [
      {
        "version": "VMware (7.0 prior to 7.0 U3i, 6.7 prior to 6.7.0 U3s, 6.5 prior to 6.5 U3u), VMware Cloud Foundation (4.x, 3.x)",
        "status": "affected"
      }
    ]
  }
]