The vCenter Server contains a server-side request forgery (SSRF) vulnerability. A malicious actor with network access to 443 on the vCenter Server may exploit this issue by accessing a URL request outside of vCenter Server or accessing an internal service.
2022-07-13T19:15:09.607
2024-11-21T06:47:44.170
Modified
CVSSv3.1: 7.5 (HIGH)
| Type | Vendor | Product | Version/Range | Vulnerable? |
|---|---|---|---|---|
| Application | vmware | cloud_foundation | ≤ 3.11 | Yes |
| Application | vmware | cloud_foundation | ≤ 4.3.1 | Yes |
| Application | vmware | vcenter_server | 6.5 | Yes |
| Application | vmware | vcenter_server | 6.5 | Yes |
| Application | vmware | vcenter_server | 6.5 | Yes |
| Application | vmware | vcenter_server | 6.5 | Yes |
| Application | vmware | vcenter_server | 6.5 | Yes |
| Application | vmware | vcenter_server | 6.5 | Yes |
| Application | vmware | vcenter_server | 6.5 | Yes |
| Application | vmware | vcenter_server | 6.5 | Yes |
| Application | vmware | vcenter_server | 6.5 | Yes |
| Application | vmware | vcenter_server | 6.5 | Yes |
| Application | vmware | vcenter_server | 6.5 | Yes |
| Application | vmware | vcenter_server | 6.5 | Yes |
| Application | vmware | vcenter_server | 6.5 | Yes |
| Application | vmware | vcenter_server | 6.5 | Yes |
| Application | vmware | vcenter_server | 6.5 | Yes |
| Application | vmware | vcenter_server | 6.5 | Yes |
| Application | vmware | vcenter_server | 6.5 | Yes |
| Application | vmware | vcenter_server | 6.5 | Yes |
| Application | vmware | vcenter_server | 6.5 | Yes |
| Application | vmware | vcenter_server | 6.5 | Yes |
| Application | vmware | vcenter_server | 6.5 | Yes |
| Application | vmware | vcenter_server | 6.5 | Yes |
| Application | vmware | vcenter_server | 6.5 | Yes |
| Application | vmware | vcenter_server | 6.5 | Yes |
| Application | vmware | vcenter_server | 6.5 | Yes |
| Application | vmware | vcenter_server | 6.5 | Yes |
| Application | vmware | vcenter_server | 6.5 | Yes |
| Application | vmware | vcenter_server | 6.7 | Yes |
| Application | vmware | vcenter_server | 6.7 | Yes |
| Application | vmware | vcenter_server | 6.7 | Yes |
| Application | vmware | vcenter_server | 6.7 | Yes |
| Application | vmware | vcenter_server | 6.7 | Yes |
| Application | vmware | vcenter_server | 6.7 | Yes |
| Application | vmware | vcenter_server | 6.7 | Yes |
| Application | vmware | vcenter_server | 6.7 | Yes |
| Application | vmware | vcenter_server | 6.7 | Yes |
| Application | vmware | vcenter_server | 6.7 | Yes |
| Application | vmware | vcenter_server | 6.7 | Yes |
| Application | vmware | vcenter_server | 6.7 | Yes |
| Application | vmware | vcenter_server | 6.7 | Yes |
| Application | vmware | vcenter_server | 6.7 | Yes |
| Application | vmware | vcenter_server | 6.7 | Yes |
| Application | vmware | vcenter_server | 6.7 | Yes |
| Application | vmware | vcenter_server | 6.7 | Yes |
| Application | vmware | vcenter_server | 6.7 | Yes |
| Application | vmware | vcenter_server | 6.7 | Yes |
| Application | vmware | vcenter_server | 6.7 | Yes |
| Application | vmware | vcenter_server | 6.7 | Yes |
| Application | vmware | vcenter_server | 7.0 | Yes |
| Application | vmware | vcenter_server | 7.0 | Yes |
| Application | vmware | vcenter_server | 7.0 | Yes |
| Application | vmware | vcenter_server | 7.0 | Yes |
| Application | vmware | vcenter_server | 7.0 | Yes |
| Application | vmware | vcenter_server | 7.0 | Yes |
| Application | vmware | vcenter_server | 7.0 | Yes |
| Application | vmware | vcenter_server | 7.0 | Yes |
| Application | vmware | vcenter_server | 7.0 | Yes |
| Application | vmware | vcenter_server | 7.0 | Yes |
| Application | vmware | vcenter_server | 7.0 | Yes |
| Application | vmware | vcenter_server | 7.0 | Yes |
| Application | vmware | vcenter_server | 7.0 | Yes |
| Application | vmware | vcenter_server | 7.0 | Yes |
| Application | vmware | vcenter_server | 7.0 | Yes |
| Application | vmware | vcenter_server | 7.0 | Yes |
| Application | vmware | vcenter_server | 7.0 | Yes |
| Application | vmware | vcenter_server | 7.0 | Yes |
| Application | vmware | vcenter_server | 7.0 | Yes |