vmware cloud-foundation CVE-2021-21993 vulnerability in VMware Products
Published on September 23, 2021

The vCenter Server contains an SSRF (Server Side Request Forgery) vulnerability due to improper validation of URLs in vCenter Server Content Library. An authorised user with access to content library may exploit this issue by sending a POST request to vCenter Server leading to information disclosure.

NVD


Products Associated with CVE-2021-21993

You can be notified by email with stack.watch whenever vulnerabilities like CVE-2021-21993 are published in these products:

 
 

Exploit Probability

EPSS
0.25%
Percentile
47.57%

EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.