Vulnerabilitycritical

VMware fixes critical RCE in VMware Cloud Foundation

Security Affairsby @securityaffairsOct 26, 2022 · 07:36 UTC (Oct 26, 2022)1 min read3

Read at securityaffairs.com

Analyze CVE-2021-39144 with Vani AIImpact, affected versions, exploitation, mitigations and detection

CVEs: CVE-2021-39144 CVE-2022-31678

Tags: cve-2021-39144 cve-2022-31678 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2021-39144	Deserialization RCE in XStream XML Library Affecting Multiple Vendors	8.5	98%	KEVPoC ×2	Aug 23, 2021 KEV Mar 10, 2023
CVE-2022-31678	VMware Cloud Foundation (NSX-V) contains an XML External Entity (XXE) vulnerability	9.1	9%		Oct 28, 2022

From the original article

1 min read at securityaffairs.com

VMware addressed a critical remote code execution vulnerability in VMware Cloud Foundation tracked as CVE-2021-39144. VMware has released security updates to address a critical vulnerability, tracked as CVE-2021-39144 (CVSSv3 9. 8), in VMware Cloud Foundation.

Security Affairs

By @securityaffairs · securityaffairs.com

Read the full article at Security Affairs

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.