CVE-2021-21992

Description

The vCenter Server contains a denial-of-service vulnerability due to improper XML entity parsing. A malicious actor with non-administrative user access to the vCenter Server vSphere Client (HTML5) or vCenter Server vSphere Web Client (FLEX/Flash) may exploit this issue to create a denial-of-service condition on the vCenter Server host.

Risk Information

Base Score
6.5
MODERATE
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
EPSS Score
Exploitation Probability
0.926

Associated Vulnerability

VulnerabilityOS Platform
Multiple Vulnerabilities are affected in VMware vCenter 6.5Windows
Multiple Vulnerabilities are affected in VMware vCenter 6.5-aWindows
Multiple Vulnerabilities are affected in VMware vCenter 6.5-bWindows
Multiple Vulnerabilities are affected in VMware vCenter 6.5-cWindows
Multiple Vulnerabilities are affected in VMware vCenter 6.5-dWindows
Multiple Vulnerabilities are affected in VMware vCenter 6.5-eWindows
Multiple Vulnerabilities are affected in VMware vCenter 6.5-fWindows
Multiple Vulnerabilities are affected in VMware vCenter 6.5-update1Windows
Multiple Vulnerabilities are affected in VMware vCenter 6.5-update1bWindows
Multiple Vulnerabilities are affected in VMware vCenter 6.5-update1cWindows
Multiple Vulnerabilities are affected in VMware vCenter 6.5-update1dWindows
Multiple Vulnerabilities are affected in VMware vCenter 6.5-update1eWindows
Multiple Vulnerabilities are affected in VMware vCenter 6.5-update1gWindows
Multiple Vulnerabilities are affected in VMware vCenter 6.5-update2Windows
Multiple Vulnerabilities are affected in VMware vCenter 6.5-update2bWindows
Multiple Vulnerabilities are affected in VMware vCenter 6.5-update2cWindows
Multiple Vulnerabilities are affected in VMware vCenter 6.5-update2dWindows
Multiple Vulnerabilities are affected in VMware vCenter 6.5-update2gWindows
Multiple Vulnerabilities are affected in VMware vCenter 6.5-update3Windows
Multiple Vulnerabilities are affected in VMware vCenter 6.5-update3dWindows
Multiple Vulnerabilities are affected in VMware vCenter 6.5-update3fWindows
Multiple Vulnerabilities are affected in VMware vCenter 6.5-update3kWindows
Multiple Vulnerabilities are affected in VMware vCenter 6.5-update3nWindows
Multiple Vulnerabilities are affected in VMware vCenter 6.5-update3pWindows
Multiple Vulnerabilities are affected in VMware vCenter 6.7Windows
Multiple Vulnerabilities are affected in VMware vCenter 6.7-aWindows
Multiple Vulnerabilities are affected in VMware vCenter 6.7-bWindows
Multiple Vulnerabilities are affected in VMware vCenter 6.7-dWindows
Multiple Vulnerabilities are affected in VMware vCenter 6.7-update1Windows
Multiple Vulnerabilities are affected in VMware vCenter 6.7-update1bWindows
Multiple Vulnerabilities are affected in VMware vCenter 6.7-update2Windows
Multiple Vulnerabilities are affected in VMware vCenter 6.7-update2aWindows
Multiple Vulnerabilities are affected in VMware vCenter 6.7-update2cWindows
Multiple Vulnerabilities are affected in VMware vCenter 6.7-update3Windows
Multiple Vulnerabilities are affected in VMware vCenter 6.7-update3aWindows
Multiple Vulnerabilities are affected in VMware vCenter 6.7-update3bWindows
Multiple Vulnerabilities are affected in VMware vCenter 6.7-update3fWindows
Multiple Vulnerabilities are affected in VMware vCenter 6.7-update3gWindows
Multiple Vulnerabilities are affected in VMware vCenter 6.7-update3jWindows
Multiple Vulnerabilities are affected in VMware vCenter 6.7-update3lWindows
Multiple Vulnerabilities are affected in VMware vCenter 6.7-update3mWindows
Multiple Vulnerabilities are affected in VMware vCenter 6.7-update3nWindows
Multiple Vulnerabilities are affected in VMware vCenter 7.0Windows
Multiple Vulnerabilities are affected in VMware vCenter 7.0-aWindows
Multiple Vulnerabilities are affected in VMware vCenter 7.0-bWindows
Multiple Vulnerabilities are affected in VMware vCenter 7.0-cWindows
Multiple Vulnerabilities are affected in VMware vCenter 7.0-dWindows
Multiple Vulnerabilities are affected in VMware vCenter 7.0-update1Windows
Multiple Vulnerabilities are affected in VMware vCenter 7.0-update1aWindows
Multiple Vulnerabilities are affected in VMware vCenter 7.0-update1cWindows
Multiple Vulnerabilities are affected in VMware vCenter 7.0-update1dWindows
Multiple Vulnerabilities are affected in VMware vCenter 7.0-update2Windows
Multiple Vulnerabilities are affected in VMware vCenter 7.0-update2aWindows
Multiple Vulnerabilities are affected in VMware vCenter 7.0-update2bWindows
Multiple Vulnerabilities are affected in VMware vCenter Server 6.5Windows
Multiple Vulnerabilities are affected in VMware vCenter Server 6.5-aWindows
Multiple Vulnerabilities are affected in VMware vCenter Server 6.5-bWindows
Multiple Vulnerabilities are affected in VMware vCenter Server 6.5-cWindows
Multiple Vulnerabilities are affected in VMware vCenter Server 6.5-dWindows
Multiple Vulnerabilities are affected in VMware vCenter Server 6.5-update1Windows
Multiple Vulnerabilities are affected in VMware vCenter Server 6.5-update1bWindows
Multiple Vulnerabilities are affected in VMware vCenter Server 6.5-update1cWindows
Multiple Vulnerabilities are affected in VMware vCenter Server 6.5-update1dWindows
Multiple Vulnerabilities are affected in VMware vCenter Server 6.5-update1eWindows
Multiple Vulnerabilities are affected in VMware vCenter Server 6.5-update1gWindows
Multiple Vulnerabilities are affected in VMware vCenter Server 6.5-update2Windows
Multiple Vulnerabilities are affected in VMware vCenter Server 6.5-update2bWindows
Multiple Vulnerabilities are affected in VMware vCenter Server 6.5-update2cWindows
Multiple Vulnerabilities are affected in VMware vCenter Server 6.5-update2dWindows
Multiple Vulnerabilities are affected in VMware vCenter Server 6.5-update2gWindows
Multiple Vulnerabilities are affected in VMware vCenter Server 6.7Windows
Multiple Vulnerabilities are affected in VMware vCenter Server 6.7-aWindows
Multiple Vulnerabilities are affected in VMware vCenter Server 6.7-bWindows
Multiple Vulnerabilities are affected in VMware vCenter Server 6.7-dWindows
Multiple Vulnerabilities are affected in VMware vCenter Server 6.7-update1Windows
Multiple Vulnerabilities are affected in VMware vCenter Server 6.7-update1bWindows
Multiple Vulnerabilities are affected in VMware vCenter Server 6.7-update2Windows
Multiple Vulnerabilities are affected in VMware vCenter Server 6.7-update2aWindows
Multiple Vulnerabilities are affected in VMware vCenter Server 6.7-update2cWindows
Multiple Vulnerabilities are affected in VMware vCenter Server 6.5-eWindows
Multiple Vulnerabilities are affected in VMware vCenter Server 6.5-fWindows
Multiple Vulnerabilities are affected in VMware vCenter Server 6.5-update3Windows
Multiple Vulnerabilities are affected in VMware vCenter Server 6.5-update3dWindows
Multiple Vulnerabilities are affected in VMware vCenter Server 6.5-update3fWindows
Multiple Vulnerabilities are affected in VMware vCenter Server 6.7-update3Windows
Multiple Vulnerabilities are affected in VMware vCenter Server 6.7-update3aWindows
Multiple Vulnerabilities are affected in VMware vCenter Server 6.7-update3bWindows
Multiple Vulnerabilities are affected in VMware vCenter Server 6.7-update3fWindows
Multiple Vulnerabilities are affected in VMware vCenter Server 6.7-update3gWindows
Multiple Vulnerabilities are affected in VMware vCenter Server 7.0Windows
Multiple Vulnerabilities are affected in VMware vCenter Server 7.0-aWindows
Multiple Vulnerabilities are affected in VMware vCenter Server 6.5-update3kWindows
Multiple Vulnerabilities are affected in VMware vCenter Server 6.7-update3jWindows
Multiple Vulnerabilities are affected in VMware vCenter Server 7.0-bWindows
Multiple Vulnerabilities are affected in VMware vCenter Server 7.0-cWindows
Multiple Vulnerabilities are affected in VMware vCenter Server 7.0-dWindows
Multiple Vulnerabilities are affected in VMware vCenter Server 7.0-update1Windows
Multiple Vulnerabilities are affected in VMware vCenter Server 7.0-update1aWindows
Multiple Vulnerabilities are affected in VMware vCenter Server 6.5-update3nWindows
Multiple Vulnerabilities are affected in VMware vCenter Server 6.7-update3lWindows
Multiple Vulnerabilities are affected in VMware vCenter Server 6.7-update3mWindows
Multiple Vulnerabilities are affected in VMware vCenter Server 7.0-update1cWindows
Multiple Vulnerabilities are affected in VMware vCenter Server 7.0-update1dWindows
Multiple Vulnerabilities are affected in VMware vCenter Server 7.0-update2Windows
Multiple Vulnerabilities are affected in VMware vCenter Server 7.0-update2aWindows
Multiple Vulnerabilities are affected in VMware vCenter Server 6.5-update3pWindows
Multiple Vulnerabilities are affected in VMware vCenter Server 6.7-update3nWindows
Multiple Vulnerabilities are affected in VMware vCenter Server 7.0-update2bWindows

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234