← ExploitWatch
HomeExploited Vulnerabilities

CVE-2021-22005 — Actively Exploited: vCenter Server (VMware)

VMware vCenter Server contains a file upload vulnerability in the Analytics service that allows a user with network access to port 443 to execute code.

CVE IDCVE-2021-22005
VendorVMware
ProductvCenter Server
Vulnerability nameVMware vCenter Server File Upload Vulnerability
Date added2021-11-03
Remediation due2021-11-17
Known ransomware useKnown
Required actionApply updates per vendor instructions.
DescriptionVMware vCenter Server contains a file upload vulnerability in the Analytics service that allows a user with network access to port 443 to execute code.
SourceCISA Known Exploited Vulnerabilities

🔍 Search all exploited vulnerabilities →