PULSEUnderground Intel

AO VIVO21sinais / 24h

FEED

ransomn0n reclama a Company #137 · CAransomn0n reclama a Company #136 · DKransomn0n reclama a Company #135 · IDransomn0n reclama a Company #134 · USransomn0n reclama a Company #133 · USransomredact reclama a Omni Hotels & Resorts · US · Hospitalityransomakira reclama a Westboro Partnersransomakira reclama a System Plus · Technologyransomakira reclama a David L Wade & Associates · Professional Servicesransomakira reclama a Source Energy Services · CA · Energy & Utilitiesransomaoqin reclama a Sistel · BR · Technologyransombyod reclama a First and Final Warning - IHG Hotels & Resorts (Estate) · Hospitalityransomqilin reclama a Calvary Christian College · AU · Educationransomeverstake reclama a ne*****h.comransomn0n reclama a Company #137 · CAransomn0n reclama a Company #136 · DKransomn0n reclama a Company #135 · IDransomn0n reclama a Company #134 · USransomn0n reclama a Company #133 · USransomredact reclama a Omni Hotels & Resorts · US · Hospitalityransomakira reclama a Westboro Partnersransomakira reclama a System Plus · Technologyransomakira reclama a David L Wade & Associates · Professional Servicesransomakira reclama a Source Energy Services · CA · Energy & Utilitiesransomaoqin reclama a Sistel · BR · Technologyransombyod reclama a First and Final Warning - IHG Hotels & Resorts (Estate) · Hospitalityransomqilin reclama a Calvary Christian College · AU · Educationransomeverstake reclama a ne*****h.com

← Todos os CVEs

CVE Watch—

CVE-2021-22017

VMware vCenter Server Improper Access Control

CVSS

—

Sem CVSS

EPSS

49.2%

p99

KEV

SIM

10 de jan. de 2022

Exploit Today

80

0-100

Publicado: — · Última mod.: —

EPSS · 30d

49.2%EPSS · 30 dias49.2%

2026-10-082026-11-05

Ficha do catálogo KEV

Produto

VMware / vCenter Server

Vulnerabilidade

VMware vCenter Server Improper Access Control

Adicionado ao KEV

10 de jan. de 2022

Corrigir até

24 de jan. de 2022

Uso conhecido em ransomware

Não

Descrição resumida

Rhttproxy as used in vCenter Server contains a vulnerability due to improper implementation of URI normalization.

Ação necessária

Apply updates per vendor instructions.

Notas

https://nvd.nist.gov/vuln/detail/CVE-2021-22017

CVEs relacionados

CVECVSSEPSSKEVRExploitTítuloMod.

CVE-2021-219859.8 CRÍ

KEV—80VMware vCenter Server Improper Input Validation Vulnerability86d CVE-2021-219729.8 CRÍ

KEV—80VMware vCenter Server Remote Code Execution Vulnerability86d CVE-2021-22005—

KEV—80VMware vCenter Server File Upload Vulnerability—CVE-2023-34048—

KEV—80VMware vCenter Server Out-of-Bounds Write Vulnerability—CVE-2020-3952—

KEV—80VMware vCenter Server Information Disclosure Vulnerability—CVE-2024-38812—

KEV—80VMware vCenter Server Heap-Based Buffer Overflow Vulnerability—