CVE-2021-21992
En bref Sévérité Non disponible EPSS EPSS 0.98 % · centile 62 (2026-10-27) État PUBLISHED Publiée 2021-09-22 Mise à jour 2024-08-03 Attribuée par vmware Statut NVD Modified Description The vCenter Server contains a denial-of-service vulnerability due to improper XML entity parsing. A malicious actor with non-administrative user access to the vCenter Server vSphere Client (HTML5) or vCenter Server vSphere Web Client (FLEX/Flash) may exploit this issue to create a denial-of-service condition on the vCenter Server host.
Scores Version Score Vecteur Évalué par CVSS 3.1 MEDIUM 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H NVD · nvd@nist.gov (Primary) CVSS 2.0 MEDIUM 6.8 AV:N/AC:L/Au:S/C:N/I:N/A:C NVD · nvd@nist.gov (Primary)
Références européennes
Avis du CERT-FR
Configurations affectées (CPE NVD) cpe:2.3:a:vmware:cloud_foundation:*:*:*:*:*:*:*:* ≥ 3.0 < 3.10.2.2cpe:2.3:a:vmware:cloud_foundation:*:*:*:*:*:*:*:* ≥ 4.0 < 4.3cpe:2.3:a:vmware:vcenter_server:6.5:-:*:*:*:*:*:*cpe:2.3:a:vmware:vcenter_server:6.5:a:*:*:*:*:*:*cpe:2.3:a:vmware:vcenter_server:6.5:b:*:*:*:*:*:*cpe:2.3:a:vmware:vcenter_server:6.5:c:*:*:*:*:*:*cpe:2.3:a:vmware:vcenter_server:6.5:d:*:*:*:*:*:*cpe:2.3:a:vmware:vcenter_server:6.5:e:*:*:*:*:*:*cpe:2.3:a:vmware:vcenter_server:6.5:f:*:*:*:*:*:*cpe:2.3:a:vmware:vcenter_server:6.5:update1:*:*:*:*:*:*cpe:2.3:a:vmware:vcenter_server:6.5:update1b:*:*:*:*:*:*cpe:2.3:a:vmware:vcenter_server:6.5:update1c:*:*:*:*:*:*cpe:2.3:a:vmware:vcenter_server:6.5:update1d:*:*:*:*:*:*cpe:2.3:a:vmware:vcenter_server:6.5:update1e:*:*:*:*:*:*cpe:2.3:a:vmware:vcenter_server:6.5:update1g:*:*:*:*:*:*cpe:2.3:a:vmware:vcenter_server:6.5:update2:*:*:*:*:*:*cpe:2.3:a:vmware:vcenter_server:6.5:update2b:*:*:*:*:*:*cpe:2.3:a:vmware:vcenter_server:6.5:update2c:*:*:*:*:*:*cpe:2.3:a:vmware:vcenter_server:6.5:update2d:*:*:*:*:*:*cpe:2.3:a:vmware:vcenter_server:6.5:update2g:*:*:*:*:*:*cpe:2.3:a:vmware:vcenter_server:6.5:update3:*:*:*:*:*:*cpe:2.3:a:vmware:vcenter_server:6.5:update3d:*:*:*:*:*:*cpe:2.3:a:vmware:vcenter_server:6.5:update3f:*:*:*:*:*:*cpe:2.3:a:vmware:vcenter_server:6.5:update3k:*:*:*:*:*:*cpe:2.3:a:vmware:vcenter_server:6.5:update3n:*:*:*:*:*:*cpe:2.3:a:vmware:vcenter_server:6.5:update3p:*:*:*:*:*:*cpe:2.3:a:vmware:vcenter_server:6.7:-:*:*:*:*:*:*cpe:2.3:a:vmware:vcenter_server:6.7:a:*:*:*:*:*:*cpe:2.3:a:vmware:vcenter_server:6.7:b:*:*:*:*:*:*cpe:2.3:a:vmware:vcenter_server:6.7:d:*:*:*:*:*:*cpe:2.3:a:vmware:vcenter_server:6.7:update1:*:*:*:*:*:*cpe:2.3:a:vmware:vcenter_server:6.7:update1b:*:*:*:*:*:*cpe:2.3:a:vmware:vcenter_server:6.7:update2:*:*:*:*:*:*cpe:2.3:a:vmware:vcenter_server:6.7:update2a:*:*:*:*:*:*cpe:2.3:a:vmware:vcenter_server:6.7:update2c:*:*:*:*:*:*cpe:2.3:a:vmware:vcenter_server:6.7:update3:*:*:*:*:*:*cpe:2.3:a:vmware:vcenter_server:6.7:update3a:*:*:*:*:*:*cpe:2.3:a:vmware:vcenter_server:6.7:update3b:*:*:*:*:*:*cpe:2.3:a:vmware:vcenter_server:6.7:update3f:*:*:*:*:*:*cpe:2.3:a:vmware:vcenter_server:6.7:update3g:*:*:*:*:*:*+16 autres Produits affectés
Références
Sources
