CVE-2021-22019

Published: Sep 23, 2021Modified: Jun 17, 2026

7.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

The vCenter Server contains a denial-of-service vulnerability in VAPI (vCenter API) service. A malicious actor with network access to port 5480 on vCenter Server may exploit this issue by sending a specially crafted jsonrpc message to create a denial of service condition.

Affected (5)

Products: Vmware: Cloud Foundation, Vcenter Server

Vmware

2 products

Cloud Foundation

Vcenter Server

Configuration A

5 vulnerable

Vulnerable Software	Affected Versions
Vmware Cloud Foundation	From 3.0 to 3.10.2.2
Vmware Cloud Foundation	From 4.0 to 4.3
Vmware Vcenter Server	Version 6.5
Vmware Vcenter Server	Version 6.7
Vmware Vcenter Server	Version 7.0

References (2)

https://www.vmware.com/security/advisories/VMSA-2021-0020.html

Source: security@vmware.com

PatchVendor Advisory

https://www.vmware.com/security/advisories/VMSA-2021-0020.html

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

Timeline

No history available yet.