The vSphere Web Client (FLEX/Flash) contains an unauthorized arbitrary file read…
Priority MEDIUM 40Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- None
- Attack complexity
- Low
- Impact type
- —
- Confidentiality · integrity · availability
- High · None · None
- Fix status
- No fix listed
Attack profile from CVSS 3.1 · NVD. Fix status from CNA.
Summary
The vSphere Web Client (FLEX/Flash) contains an unauthorized arbitrary file read vulnerability. A malicious actor with network access to port 443 on vCenter Server may exploit this issue to gain access to sensitive information.
Why it matters now
EPSS 0.04674 91st percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | VMware vCenter Server and VMware Cloud Foundation | VMware vCenter Server (6.7 before 6.7 U3p and 6.5 before 6.5 U3r) and VMware Cloud Foundation 3.x | — | No fix listed | CNA |
- VMware vCenter Server and VMware Cloud Foundation Vendor— Affected VMware vCenter Server (6.7 before 6.7 U3p and 6.5 before 6.5 U3r) and VMware Cloud Foundation 3.x Fixed in — No fix listed CNA
CPE configurations NVD · 36
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:vmware:cloud_foundation:3.0:-:*:*:*:*:*:* | 3.0 | Vulnerable | VMware |
| cpe:2.3:a:vmware:vcenter_server:6.5:-:*:*:*:*:*:* | 6.5 | Vulnerable | VMware |
| cpe:2.3:a:vmware:vcenter_server:6.5:update_1:*:*:*:*:*:* | 6.5 update_1 | Vulnerable | VMware |
| cpe:2.3:a:vmware:vcenter_server:6.5:update_1b:*:*:*:*:*:* | 6.5 update_1b | Vulnerable | VMware |
| cpe:2.3:a:vmware:vcenter_server:6.5:update_1c:*:*:*:*:*:* | 6.5 update_1c | Vulnerable | VMware |
| cpe:2.3:a:vmware:vcenter_server:6.5:update_1d:*:*:*:*:*:* | 6.5 update_1d | Vulnerable | VMware |
| cpe:2.3:a:vmware:vcenter_server:6.5:update_1e:*:*:*:*:*:* | 6.5 update_1e | Vulnerable | VMware |
| cpe:2.3:a:vmware:vcenter_server:6.5:update_1g:*:*:*:*:*:* | 6.5 update_1g | Vulnerable | VMware |
| cpe:2.3:a:vmware:vcenter_server:6.5:update_2:*:*:*:*:*:* | 6.5 update_2 | Vulnerable | VMware |
| cpe:2.3:a:vmware:vcenter_server:6.5:update_2b:*:*:*:*:*:* | 6.5 update_2b | Vulnerable | VMware |
- cpe:2.3:a:vmware:cloud_foundation:3.0:-:*:*:*:*:*:* Versions 3.0 Vulnerable ·VMware
- cpe:2.3:a:vmware:vcenter_server:6.5:-:*:*:*:*:*:* Versions 6.5 Vulnerable ·VMware
- cpe:2.3:a:vmware:vcenter_server:6.5:update_1:*:*:*:*:*:* Versions 6.5 update_1 Vulnerable ·VMware
- cpe:2.3:a:vmware:vcenter_server:6.5:update_1b:*:*:*:*:*:* Versions 6.5 update_1b Vulnerable ·VMware
- cpe:2.3:a:vmware:vcenter_server:6.5:update_1c:*:*:*:*:*:* Versions 6.5 update_1c Vulnerable ·VMware
- cpe:2.3:a:vmware:vcenter_server:6.5:update_1d:*:*:*:*:*:* Versions 6.5 update_1d Vulnerable ·VMware
- cpe:2.3:a:vmware:vcenter_server:6.5:update_1e:*:*:*:*:*:* Versions 6.5 update_1e Vulnerable ·VMware
- cpe:2.3:a:vmware:vcenter_server:6.5:update_1g:*:*:*:*:*:* Versions 6.5 update_1g Vulnerable ·VMware
- cpe:2.3:a:vmware:vcenter_server:6.5:update_2:*:*:*:*:*:* Versions 6.5 update_2 Vulnerable ·VMware
- cpe:2.3:a:vmware:vcenter_server:6.5:update_2b:*:*:*:*:*:* Versions 6.5 update_2b Vulnerable ·VMware
Show 26 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:vmware:vcenter_server:6.5:update_2c:*:*:*:*:*:* | 6.5 update_2c | Vulnerable | VMware |
| cpe:2.3:a:vmware:vcenter_server:6.5:update_2d:*:*:*:*:*:* | 6.5 update_2d | Vulnerable | VMware |
| cpe:2.3:a:vmware:vcenter_server:6.5:update_2g:*:*:*:*:*:* | 6.5 update_2g | Vulnerable | VMware |
| cpe:2.3:a:vmware:vcenter_server:6.5:update_3:*:*:*:*:*:* | 6.5 update_3 | Vulnerable | VMware |
| cpe:2.3:a:vmware:vcenter_server:6.5:update_3d:*:*:*:*:*:* | 6.5 update_3d | Vulnerable | VMware |
| cpe:2.3:a:vmware:vcenter_server:6.5:update_3f:*:*:*:*:*:* | 6.5 update_3f | Vulnerable | VMware |
| cpe:2.3:a:vmware:vcenter_server:6.5:update_3k:*:*:*:*:*:* | 6.5 update_3k | Vulnerable | VMware |
| cpe:2.3:a:vmware:vcenter_server:6.5:update_3n:*:*:*:*:*:* | 6.5 update_3n | Vulnerable | VMware |
| cpe:2.3:a:vmware:vcenter_server:6.5:update_3p:*:*:*:*:*:* | 6.5 update_3p | Vulnerable | VMware |
| cpe:2.3:a:vmware:vcenter_server:6.5:update_3q:*:*:*:*:*:* | 6.5 update_3q | Vulnerable | VMware |
| cpe:2.3:a:vmware:vcenter_server:6.7:-:*:*:*:*:*:* | 6.7 | Vulnerable | VMware |
| cpe:2.3:a:vmware:vcenter_server:6.7:update_1:*:*:*:*:*:* | 6.7 update_1 | Vulnerable | VMware |
| cpe:2.3:a:vmware:vcenter_server:6.7:update_1b:*:*:*:*:*:* | 6.7 update_1b | Vulnerable | VMware |
| cpe:2.3:a:vmware:vcenter_server:6.7:update_2:*:*:*:*:*:* | 6.7 update_2 | Vulnerable | VMware |
| cpe:2.3:a:vmware:vcenter_server:6.7:update_2a:*:*:*:*:*:* | 6.7 update_2a | Vulnerable | VMware |
| cpe:2.3:a:vmware:vcenter_server:6.7:update_2c:*:*:*:*:*:* | 6.7 update_2c | Vulnerable | VMware |
| cpe:2.3:a:vmware:vcenter_server:6.7:update_3:*:*:*:*:*:* | 6.7 update_3 | Vulnerable | VMware |
| cpe:2.3:a:vmware:vcenter_server:6.7:update_3a:*:*:*:*:*:* | 6.7 update_3a | Vulnerable | VMware |
| cpe:2.3:a:vmware:vcenter_server:6.7:update_3b:*:*:*:*:*:* | 6.7 update_3b | Vulnerable | VMware |
| cpe:2.3:a:vmware:vcenter_server:6.7:update_3f:*:*:*:*:*:* | 6.7 update_3f | Vulnerable | VMware |
| cpe:2.3:a:vmware:vcenter_server:6.7:update_3g:*:*:*:*:*:* | 6.7 update_3g | Vulnerable | VMware |
| cpe:2.3:a:vmware:vcenter_server:6.7:update_3j:*:*:*:*:*:* | 6.7 update_3j | Vulnerable | VMware |
| cpe:2.3:a:vmware:vcenter_server:6.7:update_3l:*:*:*:*:*:* | 6.7 update_3l | Vulnerable | VMware |
| cpe:2.3:a:vmware:vcenter_server:6.7:update_3m:*:*:*:*:*:* | 6.7 update_3m | Vulnerable | VMware |
| cpe:2.3:a:vmware:vcenter_server:6.7:update_3n:*:*:*:*:*:* | 6.7 update_3n | Vulnerable | VMware |
| cpe:2.3:a:vmware:vcenter_server:6.7:update_3o:*:*:*:*:*:* | 6.7 update_3o | Vulnerable | VMware |
- cpe:2.3:a:vmware:vcenter_server:6.5:update_2c:*:*:*:*:*:* Versions 6.5 update_2c Vulnerable ·VMware
- cpe:2.3:a:vmware:vcenter_server:6.5:update_2d:*:*:*:*:*:* Versions 6.5 update_2d Vulnerable ·VMware
- cpe:2.3:a:vmware:vcenter_server:6.5:update_2g:*:*:*:*:*:* Versions 6.5 update_2g Vulnerable ·VMware
- cpe:2.3:a:vmware:vcenter_server:6.5:update_3:*:*:*:*:*:* Versions 6.5 update_3 Vulnerable ·VMware
- cpe:2.3:a:vmware:vcenter_server:6.5:update_3d:*:*:*:*:*:* Versions 6.5 update_3d Vulnerable ·VMware
- cpe:2.3:a:vmware:vcenter_server:6.5:update_3f:*:*:*:*:*:* Versions 6.5 update_3f Vulnerable ·VMware
- cpe:2.3:a:vmware:vcenter_server:6.5:update_3k:*:*:*:*:*:* Versions 6.5 update_3k Vulnerable ·VMware
- cpe:2.3:a:vmware:vcenter_server:6.5:update_3n:*:*:*:*:*:* Versions 6.5 update_3n Vulnerable ·VMware
- cpe:2.3:a:vmware:vcenter_server:6.5:update_3p:*:*:*:*:*:* Versions 6.5 update_3p Vulnerable ·VMware
- cpe:2.3:a:vmware:vcenter_server:6.5:update_3q:*:*:*:*:*:* Versions 6.5 update_3q Vulnerable ·VMware
- cpe:2.3:a:vmware:vcenter_server:6.7:-:*:*:*:*:*:* Versions 6.7 Vulnerable ·VMware
- cpe:2.3:a:vmware:vcenter_server:6.7:update_1:*:*:*:*:*:* Versions 6.7 update_1 Vulnerable ·VMware
- cpe:2.3:a:vmware:vcenter_server:6.7:update_1b:*:*:*:*:*:* Versions 6.7 update_1b Vulnerable ·VMware
- cpe:2.3:a:vmware:vcenter_server:6.7:update_2:*:*:*:*:*:* Versions 6.7 update_2 Vulnerable ·VMware
- cpe:2.3:a:vmware:vcenter_server:6.7:update_2a:*:*:*:*:*:* Versions 6.7 update_2a Vulnerable ·VMware
- cpe:2.3:a:vmware:vcenter_server:6.7:update_2c:*:*:*:*:*:* Versions 6.7 update_2c Vulnerable ·VMware
- cpe:2.3:a:vmware:vcenter_server:6.7:update_3:*:*:*:*:*:* Versions 6.7 update_3 Vulnerable ·VMware
- cpe:2.3:a:vmware:vcenter_server:6.7:update_3a:*:*:*:*:*:* Versions 6.7 update_3a Vulnerable ·VMware
- cpe:2.3:a:vmware:vcenter_server:6.7:update_3b:*:*:*:*:*:* Versions 6.7 update_3b Vulnerable ·VMware
- cpe:2.3:a:vmware:vcenter_server:6.7:update_3f:*:*:*:*:*:* Versions 6.7 update_3f Vulnerable ·VMware
- cpe:2.3:a:vmware:vcenter_server:6.7:update_3g:*:*:*:*:*:* Versions 6.7 update_3g Vulnerable ·VMware
- cpe:2.3:a:vmware:vcenter_server:6.7:update_3j:*:*:*:*:*:* Versions 6.7 update_3j Vulnerable ·VMware
- cpe:2.3:a:vmware:vcenter_server:6.7:update_3l:*:*:*:*:*:* Versions 6.7 update_3l Vulnerable ·VMware
- cpe:2.3:a:vmware:vcenter_server:6.7:update_3m:*:*:*:*:*:* Versions 6.7 update_3m Vulnerable ·VMware
- cpe:2.3:a:vmware:vcenter_server:6.7:update_3n:*:*:*:*:*:* Versions 6.7 update_3n Vulnerable ·VMware
- cpe:2.3:a:vmware:vcenter_server:6.7:update_3o:*:*:*:*:*:* Versions 6.7 update_3o Vulnerable ·VMware
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2021-21980
- 2026-10-03 Alias added: GHSA-j86w-wm9c-rcfm
References
More VMware Cloud Foundation vulnerabilities
- TI-2024-26040 Privilege escalation in VMware vCenter Server KEVCVSS 3.1CRITICAL 9.8
- TI-2024-26039 Heap-overflow in VMware vCenter Server KEVCVSS 3.1CRITICAL 9.8
- TI-2024-24610 Out-of-bounds write in VMware vCenter Server KEVCVSS 3.1CRITICAL 9.8
- TI-2022-07131 Code injection in VMware Workspace ONE Access and Identity Manager KEVCVSS 3.1CRITICAL 9.8
- TI-2021-05049 Path traversal in VMware vCenter Server, VMware Cloud Foundation KEVCVSS 3.1CRITICAL 9.8
- TI-2021-05029 Improper input validation in VMware vCenter Server and VMware Cloud Foundation KEVCVSS 3.1CRITICAL 9.8
Sources
- CVE-2021-21980 · CVE Program
- CVE-2021-21980 · NVD
- FIRST EPSS
- GHSA-j86w-wm9c-rcfm · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences