VMware vCenter Server updates address multiple security vulnerabilities

3a. vCenter Server file upload vulnerability CVE-2021-22005 The vCenter Server contains an arbitrary file upload vulnerability in the Analytics service. VMware has evaluated the severity of this issue to be in the Critical severity range with a maximum CVSSv3 base score of 9.8. 3b. vCenter Server...

Vmware VMware vCenter Server 授权问题漏洞

VMware vCenter Server is a suite of server and virtualization management software from Vmware, Inc. The software provides a centralized platform for managing VMware vSphere environments, automating the implementation and delivery of virtual infrastructures. vCenter Server is vulnerable to a rever...

VMware vCenter Server 安全漏洞

VMware vCenter Server is a suite of server and virtualization management software from Vmware, Inc. The software provides a centralized platform for managing VMware vSphere environments, automating the implementation and delivery of virtual infrastructures. vCenter Server is vulnerable to a local...

VMware vCenter Server 输入验证错误漏洞

Vmware VMware vCenter Server is a suite of server and virtualization management software from Vmware. The software provides a centralized platform for managing VMware vSphere environments that automates the implementation and delivery of virtual infrastructures. An input validation error...

Photon OS 3.0: Vim PHSA-2021-3.0-0300

An update of the vim package has been released. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2021-3.0-0300. The text itself is copyright C VMware, Inc. include'deprecatednasllevel.inc'...

VMSA-2021-0020:VMware vCenter Server updates address multiple security vulnerabilities

Advisory ID:VMSA-2021-0020.2 CVSSv3 Range:4.3-9.8 Issue Date:2021-09-21 Updated On:2025-12-05 CVEs:CVE-2021-21991, CVE-2021-21992, CVE-2021-21993, CVE-2021-22005, CVE-2021-22006, CVE-2021-22007, CVE-2021-22008, CVE-2021-22009, CVE-2021-22010, CVE-2021-22011, CVE-2021-22012, CVE-2021-22013,...

The vulnerability of the OpenSLP supervisor of VMware ESXi and the VMware Cloud Foundation virtualization platform allows a attacker to trigger a service failure.

The vulnerability of the OpenSLP supervisor of VMware ESXi and the VMware Cloud Foundation virtualization platform relates to reading data outside the buffer in memory. Exploiting this vulnerability can allow a malicious actor to cause service failures by connecting through port 427...

CVE-2020-3960

VMware ESXi 6.7 before ESXi670-202006401-SG and 6.5 before ESXi650-202005401-SG, Workstation 15.x before 15.5.5, and Fusion 11.x before 11.5.5 contain an out-of-bounds read vulnerability in NVMe functionality. A malicious actor with local non-administrative access to a virtual machine with a...

CVE-2020-3960

VMware ESXi 6.7 before ESXi670-202006401-SG and 6.5 before ESXi650-202005401-SG, Workstation 15.x before 15.5.5, and Fusion 11.x before 11.5.5 contain an out-of-bounds read vulnerability in NVMe functionality. A malicious actor with local non-administrative access to a virtual machine with a...

Out-of-bounds

VMware ESXi 6.7 before ESXi670-202006401-SG and 6.5 before ESXi650-202005401-SG, Workstation 15.x before 15.5.5, and Fusion 11.x before 11.5.5 contain an out-of-bounds read vulnerability in NVMe functionality. A malicious actor with local non-administrative access to a virtual machine with a...

CVE-2020-3960

CVE-2020-3960 affects VMware ESXi, Workstation, and Fusion with an out-of-bounds read in NVMe functionality. A local, non-admin attacker with a VM containing a virtual NVMe controller may read privileged data from physical memory. Affected products/versions include ESXi 6.7 (prior to 670-20200640...

CVE-2020-3960

VMware ESXi 6.7 before ESXi670-202006401-SG and 6.5 before ESXi650-202005401-SG, Workstation 15.x before 15.5.5, and Fusion 11.x before 11.5.5 contain an out-of-bounds read vulnerability in NVMe functionality. A malicious actor with local non-administrative access to a virtual machine with a...

Veeam Disaster Recovery Orchestrator limitations with VMware Cloud Offerings

Overview VMware Cloud Verified offerings exist in various forms. This article highlights specific considerations when working with Veeam Recovery Orchestrator, Veeam Backup & Replication, and Veeam ONE for disaster recovery orchestration purposes. Depending on the vendor-specific VMware solution...

Photon OS 3.0: Libgcrypt PHSA-2021-3.0-0257

An update of the libgcrypt package has been released. C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2021-3.0-0257. The text itself is copyright C VMware, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if...

Photon OS 2.0: Linux PHSA-2021-2.0-0387

An update of the linux package has been released. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2021-2.0-0387. The text itself is copyright C VMware, Inc...

Photon OS 4.0: Dnsmasq PHSA-2021-4.0-0093

An update of the dnsmasq package has been released. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2021-4.0-0093. The text itself is copyright C VMware, Inc...

Photon OS 2.0: Dnsmasq PHSA-2021-2.0-0386

An update of the dnsmasq package has been released. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2021-2.0-0386. The text itself is copyright C VMware, Inc...

Photon OS 4.0: Openssl PHSA-2021-4.0-0094

An update of the openssl package has been released. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2021-4.0-0094. The text itself is copyright C VMware, Inc...

Photon OS 3.0: Haproxy PHSA-2021-3.0-0293

An update of the haproxy package has been released. C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2021-3.0-0293. The text itself is copyright C VMware, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if...

Photon OS 3.0: Go PHSA-2021-3.0-0294

An update of the go package has been released. C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2021-3.0-0294. The text itself is copyright C VMware, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description...