CVE-2021-26987

Published: Mar 15, 2021Modified: Jun 17, 2026

9.8

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 3.9 / Impact: 5.9

Source: NVD

Description

Element Plug-in for vCenter Server incorporates SpringBoot Framework. SpringBoot Framework versions prior to 1.3.2 are susceptible to a vulnerability which when successfully exploited could lead to Remote Code Execution. All versions of Element Plug-in for vCenter Server, Management Services versions prior to 2.17.56 and Management Node versions through 12.2 contain vulnerable versions of SpringBoot Framework.

Affected (4)

Products: Vmware: Spring Boot · Netapp: Element Plug In For Vcenter Server, Management Services For Element Software And Netapp Hci, Solidfire & Hci Management Node

Vmware

1 product

Spring Boot

Netapp

3 products

Element Plug In For Vcenter Server

Management Services For Element Software And Netapp Hci

Solidfire & Hci Management Node

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Vmware Spring Boot	Before 1.3.2

Configuration B

3 vulnerable

Vulnerable Software	Affected Versions
Netapp Element Plug In For Vcenter Server	All versions
Netapp Management Services For Element Software And Netapp Hci	Before 2.17.56
Netapp Solidfire & Hci Management Node	Up to 12.2

References (2)

https://security.netapp.com/advisory/ntap-20210315-0001/

Source: security-alert@netapp.com

Vendor Advisory

https://security.netapp.com/advisory/ntap-20210315-0001/

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.