CVE-2021-22014: vmware cloud_foundation
Vulnerability summary
CVE-2021-22014 is a high (CVSS 9.0) vulnerability in vmware cloud_foundation. EPSS estimates a 1.52% chance of exploitation in the next 30 days, higher than 74.1% of scored vulnerabilities.
Timeline
- 23-09-2021PublishedVulnerability first disclosed.
- 03-08-2024Last modifiedVulnerability information updated.
Description
The vCenter Server contains an authenticated code execution vulnerability in VAMI (Virtual Appliance Management Infrastructure). An authenticated VAMI user with network access to port 5480 on vCenter Server may exploit this issue to execute code on the underlying operating system that hosts vCenter Server.
CVSS metrics
2 scores · 1 source · 2 versionsEPSS trend
Probability
1.52%
Chance of exploitation in the next 30 days
Percentile
74%
Versus all other CVEs
30-day change
0.00 pp
From 1.52% on 18-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Vmware2 products
- cloud_foundation≥ 3.0, < 5.0
- vcenter_serverEOL6.5 | 6.7 | 7.0
1 vendor · 2 products