CVE-2021-21992
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2021-21992
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
The vCenter Server contains a denial-of-service vulnerability due to improper XML entity parsing. A malicious actor with non-administrative user access to the vCenter Server vSphere Client (HTML5) or vCenter Server vSphere Web Client (FLEX/Flash) may exploit this issue to create a denial-of-service condition on the vCenter Server host.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
VMware vCenter Server 资源管理错误漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
VMware vCenter Server是美国威睿（VMware）公司的一套服务器和虚拟化管理软件。该软件提供了一个用于管理VMware vSphere环境的集中式平台，可自动实施和交付虚拟基础架构。 VMware vCenter Server 存在资源管理错误漏洞，该漏洞源于在解析XML数据时对用户提供的输入验证不足。远程用户可以向应用程序传递特制的XML数据，并执行拒绝服务(DoS)攻击。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | VMware vCenter Server, VMware Cloud Foundation | VMware vCenter Server(7.x before 7.0 U2c, 6.7 before 6.7 U3o and 6.5 before 6.5 U3q) and VMware Cloud Foundation (4.x before 4.3 and 3.x before 3.10.2.2) | - |
II. Public POCs for CVE-2021-21992
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2021-21992
请登录查看更多情报信息。
- https://www.vmware.com/security/advisories/VMSA-2021-0020.htmlx_refsource_MISC
- https://nvd.nist.gov/vuln/detail/CVE-2021-21992
Same Patch Batch · n/a · 2021-09-22 · 14 CVEs total
| CVE-2020-23481 | CMS Made Simple 跨站脚本漏洞 | |
| CVE-2020-23478 | Leo-Editor 安全漏洞 | |
| CVE-2020-23469 | gedit 安全漏洞 | |
| CVE-2021-21991 | VMware vCenter Server 权限许可和访问控制问题漏洞 | |
| CVE-2019-6288 | Edgecore ECS2020 命令注入漏洞 | |
| CVE-2021-40684 | Talend ESB 授权问题漏洞 | |
| CVE-2021-40875 | Gurock Software Gurock TestRail 信息泄露漏洞 | |
| CVE-2021-37927 | Zoho Corporation ADManager Plus 数据伪造问题漏洞 | |
| CVE-2021-37925 | ZOHO ManageEngine ADManager Plus 操作系统命令注入漏洞 | |
| CVE-2021-39404 | MaianAffiliate 跨站脚本漏洞 | |
| CVE-2021-36260 | Hikvision Web Server 操作系统命令注入漏洞 | |
| CVE-2021-38112 | Amazon WorkSpaces 参数注入漏洞 | |
| CVE-2021-3583 | Red Hat Ansible 代码注入漏洞 |
IV. Related Vulnerabilities
Same vendor: n/a
- CVE-2026-8276
bettercap MySQL Server mysql_server.go integer coercion - CVE-2026-8275
bettercap zerogod IPP Service zerogod_ipp_primitives.go ippR - CVE-2026-8270
Open5GS SMF ogs_nas_parse_qos_rules denial of service - CVE-2026-8269
Open5GS SMF smf_nsmf_handle_create_sm_context denial of serv - CVE-2026-8268
Open5GS SMF OpenAPI_list_create denial of service
V. Comments for CVE-2021-21992
No comments yet