5.3

CVE-2022-31698: vmware cloud_foundation Uncontrolled Resource Consumption

CVSS: 5.3v3.1MediumModified
Published 13-12-2022Last modified 22-04-2025
Open JSON

Vulnerability summary

CVE-2022-31698 is a medium (CVSS 5.3) Uncontrolled Resource Consumption vulnerability in vmware cloud_foundation. EPSS estimates a 47.80% chance of exploitation in the next 30 days, higher than 98.8% of scored vulnerabilities.

Overall risk
31/100
0100
Medium · default modelHow is this calculated?
CVSS score
5.3/10
010
Medium · v3.1 (CVE.org)
EPSS score
47.80%
0%100%
High · 0.00 pp in 30 days
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded

Timeline

  1. 13-12-2022
    PublishedVulnerability first disclosed.
  2. 22-04-2025
    Last modifiedVulnerability information updated.

Description

The vCenter Server contains a denial-of-service vulnerability in the content library service. A malicious actor with network access to port 443 on vCenter Server may exploit this issue to trigger a denial-of-service condition by sending a specially crafted header.

CVSS metrics

2 scores · 2 sources · 1 version

EPSS trend

Probability

47.80%

Chance of exploitation in the next 30 days

Percentile

99%

Versus all other CVEs

30-day change

0.00 pp

From 47.80% on 20-09-2026

20-09-202620-10-2026
EPSS score
47.80%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

Affected systems

Vmware2 products
  • cloud_foundation3.0 | 3.0.1 | 3.0.1.1 | 3.5 | 3.5.1 | 3.7 | 3.7.1 | 3.7.2 | 3.8 | 3.8.1 | 3.9 | 3.9.1 | 3.10 | 3.10.1 | 3.10.1.1 | 3.10.1.2 | 3.10.2 | 3.10.2.1 | 3.10.2.2 | 3.11 | 4.0 | 4.0.1 | 4.1 | 4.1.0.1 | 4.2 | 4.2.1 | 4.3 | 4.3.1 | 4.4 | 4.4.1 | 4.4.1.1
  • vcenter_serverEOL6.5 | 6.5:a | 6.5:b | 6.5:c | 6.5:d | 6.5:e | 6.5:f | 6.5:update1 | 6.5:update1b | 6.5:update1c | 6.5:update1d | 6.5:update1e | 6.5:update1g | 6.5:update2 | 6.5:update2b | 6.5:update2c | 6.5:update2d | 6.5:update2g | 6.5:update3 | 6.5:update3d | 6.5:update3f | 6.5:update3k | 6.5:update3n | 6.5:update3p | 6.5:update3q | 6.5:update3r | 6.5:update3s | 6.5:update3t | 6.7 | 6.7:a | 6.7:b | 6.7:d | 6.7:update_3o | 6.7:update1 | 6.7:update1b | 6.7:update2 | 6.7:update2a | 6.7:update2c | 6.7:update3 | 6.7:update3a | 6.7:update3b | 6.7:update3f | 6.7:update3g | 6.7:update3j | 6.7:update3l | 6.7:update3m | 6.7:update3n | 6.7:update3o | 6.7:update3p | 6.7:update3q | 6.7:update3r | 7.0 | 7.0:a | 7.0:b | 7.0:c | 7.0:d | 7.0:update1 | 7.0:update1a | 7.0:update1c | 7.0:update1d | 7.0:update2 | 7.0:update2a | 7.0:update2b | 7.0:update2c | 7.0:update2d | 7.0:update3 | 7.0:update3a | 7.0:update3c | 7.0:update3d | 7.0:update3e | 7.0:update3f | 7.0:update3g | 7.0:update3h

1 vendor · 2 products

References

2 links