VMware vCenter Server

NewsSecurity Vulnerabilities

VMware vCenter Server Appliance DCE/RPC Protocol Out-Of-Bounds Write Remote Code Execution Vulnerability [CVE-2023-34048]

CVE number – CVE-2023-34048 This vulnerability allows remote attackers to execute arbitrary code on affected installations of VMware vCenter Server

Read More
NewsSecurity Vulnerabilities

VMware vCenter Server updates address arbitrary file read and SSRF vulnerabilities (CVE-2021-21980, CVE-2021-22049)

CVE numbers = CVE-2021-21980 and CVE-2021-22049 Multiple vulnerabilities in VMware vCenter Server were privately reported to VMware. Updates are available

Read More
NewsSecurity Vulnerabilities

VMware vCenter Server updates address a privilege escalation vulnerability (CVE-2021-22048)

A privilege escalation vulnerability in VMware Center Server was privately reported to VMware. Workarounds are available to remediate this vulnerability

Read More
NewsSecurity Vulnerabilities

VMware vCenter Server local privilege escalation vulnerability (CVE-2021-21991)

CVE number = CVE-2021-21991 The VMware vCenter Server contains a local privilege escalation vulnerability due to the way it handles session tokens. 

Read More
NewsSecurity Vulnerabilities

VMware vCenter Server file upload vulnerability (CVE-2021-22005)

CVE number = CVE-2021-22005 The vCenter Server contains an arbitrary file upload vulnerability in the Analytics service. A malicious actor with

Read More
NewsSecurity Vulnerabilities

VMware ESXi and vCenter Server security vulnerabilities (CVE-2021-21972, CVE-2021-21973, CVE-2021-21974)

CVE numbers – CVE-2021-21972, CVE-2021-21973, CVE-2021-21974 Multiple vulnerabilities in VMware ESXi and vSphere Client (HTML5) were privately reported to VMware. Updates

Read More