60
CVE-2021-22009
—CVSS 3.1
7.5 high
EPSS
1%p71
Published
()
Modified
Description
The vCenter Server contains multiple denial-of-service vulnerabilities in VAPI (vCenter API) service. A malicious actor with network access to port 443 on vCenter Server may exploit these issues to create a denial of service condition due to excessive memory consumption by VAPI service.
- Vendors
- vmware
- Products
- cloud foundation, vcenter server
- Weakness
- CWE-668
- Vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H