Vulnerabilitycritical
VMware Releases Patch for Critical RCE Flaw in Cloud Foundation Platform
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2021-39144 | Deserialization RCE in XStream XML Library Affecting Multiple Vendors | 8.5 | 98% | KEVPoC ×2 | KEV |
| CVE-2022-31678 | VMware Cloud Foundation (NSX-V) contains an XML External Entity (XXE) vulnerability | 9.1 | 9% |
From the original article
1 min read at thehackernews.com
VMware on Tuesday shipped security updates to address a critical security flaw in its VMware Cloud Foundation product. Tracked as CVE-2021-39144, the issue has been rated 9. 8 out of 10 on the CVSS vulnerability scoring system, and relates to a remote code execution vulnerability via XStream open source library.
By @TheHackersNews · thehackernews.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.