VMware vCenter Server, VMware Cloud Foundation vulnerabilities
We track 2 vulnerabilities in VMware vCenter Server, VMware Cloud Foundation products. 1 is rated high or critical, and 2 have been exploited in real attacks. The most recent was published on September 23, 2021.
2vulnerabilities
1critical
0high
2exploited
7.6average CVSS score
Latest VMware vCenter Server, VMware Cloud Foundation vulnerabilities
- 5.3 Medium severity
VMware vCenter Server Improper Access Control Exploited
Rhttproxy as used in vCenter Server contains a vulnerability due to improper implementation of URI normalization. A malicious actor with network access to port 443 on vCenter Server may exploit this issue to bypass proxy leading to internal endpoints being acc
- 9.8 Critical severity
VMware vCenter Server File Upload Exploited
The vCenter Server contains an arbitrary file upload vulnerability in the Analytics service. A malicious actor with network access to port 443 on vCenter Server may exploit this issue to execute code on vCenter Server by uploading a specially crafted file.