CVE-2021-21973 VMware VCenter Server And Cloud Foundation
VMware vCenter Server and Cloud Foundation Server contain a SSRF vulnerability due to improper validation of URLs in a vCenter Server plugin. This allows for information disclosure.
- CVSS
- not scored
On CISA’s exploited list
VMware vCenter Server and Cloud Foundation Server Side Request Forgery (SSRF) Vulnerability
- Added
- 2022-03-07
- Federal patch deadline
- 2022-03-21
- Ransomware use
- not known