CVE-2021-21993 vulnerability in VMware Products
Published on September 23, 2021
The vCenter Server contains an SSRF (Server Side Request Forgery) vulnerability due to improper validation of URLs in vCenter Server Content Library. An authorised user with access to content library may exploit this issue by sending a POST request to vCenter Server leading to information disclosure.
Products Associated with CVE-2021-21993
stack.watch emails you whenever new vulnerabilities are published in VMware Cloud Foundation or VMware Vcenter Server. Just hit a watch button to start following.
Exploit Probability
EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.