VYPR
← All advisories
High severity7.5NVD Advisory· Published Nov 24, 2021· Updated Jun 17, 2026

CVE-2021-21980

CVE-2021-21980

Description

The vSphere Web Client (FLEX/Flash) contains an unauthorized arbitrary file read vulnerability. A malicious actor with network access to port 443 on vCenter Server may exploit this issue to gain access to sensitive information.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

38
  • VMware/Cloud Foundation
    cpe:2.3:a:vmware:cloud_foundation:3.0:-:*:*:*:*:*:*
  • VMware/Vcenter Server35 versions
    cpe:2.3:a:vmware:vcenter_server:6.5:-:*:*:*:*:*:*+ 34 more
    • cpe:2.3:a:vmware:vcenter_server:6.5:-:*:*:*:*:*:*
    • cpe:2.3:a:vmware:vcenter_server:6.5:update_1:*:*:*:*:*:*
    • cpe:2.3:a:vmware:vcenter_server:6.5:update_1b:*:*:*:*:*:*
    • cpe:2.3:a:vmware:vcenter_server:6.5:update_1c:*:*:*:*:*:*
    • cpe:2.3:a:vmware:vcenter_server:6.5:update_1d:*:*:*:*:*:*
    • cpe:2.3:a:vmware:vcenter_server:6.5:update_1e:*:*:*:*:*:*
    • cpe:2.3:a:vmware:vcenter_server:6.5:update_1g:*:*:*:*:*:*
    • cpe:2.3:a:vmware:vcenter_server:6.5:update_2:*:*:*:*:*:*
    • cpe:2.3:a:vmware:vcenter_server:6.5:update_2b:*:*:*:*:*:*
    • cpe:2.3:a:vmware:vcenter_server:6.5:update_2c:*:*:*:*:*:*
    • cpe:2.3:a:vmware:vcenter_server:6.5:update_2d:*:*:*:*:*:*
    • cpe:2.3:a:vmware:vcenter_server:6.5:update_2g:*:*:*:*:*:*
    • cpe:2.3:a:vmware:vcenter_server:6.5:update_3:*:*:*:*:*:*
    • cpe:2.3:a:vmware:vcenter_server:6.5:update_3d:*:*:*:*:*:*
    • cpe:2.3:a:vmware:vcenter_server:6.5:update_3f:*:*:*:*:*:*
    • cpe:2.3:a:vmware:vcenter_server:6.5:update_3k:*:*:*:*:*:*
    • cpe:2.3:a:vmware:vcenter_server:6.5:update_3n:*:*:*:*:*:*
    • cpe:2.3:a:vmware:vcenter_server:6.5:update_3p:*:*:*:*:*:*
    • cpe:2.3:a:vmware:vcenter_server:6.5:update_3q:*:*:*:*:*:*
    • cpe:2.3:a:vmware:vcenter_server:6.7:-:*:*:*:*:*:*
    • cpe:2.3:a:vmware:vcenter_server:6.7:update_1:*:*:*:*:*:*
    • cpe:2.3:a:vmware:vcenter_server:6.7:update_1b:*:*:*:*:*:*
    • cpe:2.3:a:vmware:vcenter_server:6.7:update_2:*:*:*:*:*:*
    • cpe:2.3:a:vmware:vcenter_server:6.7:update_2a:*:*:*:*:*:*
    • cpe:2.3:a:vmware:vcenter_server:6.7:update_2c:*:*:*:*:*:*
    • cpe:2.3:a:vmware:vcenter_server:6.7:update_3:*:*:*:*:*:*
    • cpe:2.3:a:vmware:vcenter_server:6.7:update_3a:*:*:*:*:*:*
    • cpe:2.3:a:vmware:vcenter_server:6.7:update_3b:*:*:*:*:*:*
    • cpe:2.3:a:vmware:vcenter_server:6.7:update_3f:*:*:*:*:*:*
    • cpe:2.3:a:vmware:vcenter_server:6.7:update_3g:*:*:*:*:*:*
    • cpe:2.3:a:vmware:vcenter_server:6.7:update_3j:*:*:*:*:*:*
    • cpe:2.3:a:vmware:vcenter_server:6.7:update_3l:*:*:*:*:*:*
    • cpe:2.3:a:vmware:vcenter_server:6.7:update_3m:*:*:*:*:*:*
    • cpe:2.3:a:vmware:vcenter_server:6.7:update_3n:*:*:*:*:*:*
    • cpe:2.3:a:vmware:vcenter_server:6.7:update_3o:*:*:*:*:*:*
  • VMware/vSphere Web Clientdescription
  • VMware/Vsphere Clientllm-fuzzy

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.