Uncontrolled resource consumption in VMware vCenter Server, VMware Cloud Foundation
Priority MEDIUM 60CWE-400Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- None
- Attack complexity
- Low
- Impact type
- Denial of service
- Confidentiality · integrity · availability
- Low · None · None
- Fix status
- No fix listed
Attack profile from CVSS 3.1 · CISA ADP. Fix status from CNA. Impact type from CWE-400.
Summary
The vCenter Server contains a denial-of-service vulnerability in the content library service. A malicious actor with network access to port 443 on vCenter Server may exploit this issue to trigger a denial-of-service condition by sending a specially crafted header.
Why it matters now
Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.47795 98th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- Yes
- Technical impact
- Partial
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | VMware vCenter Server, VMware Cloud Foundation | VMware (7.0 prior to 7.0 U3i, 6.7 prior to 6.7.0 U3s, 6.5 prior to 6.5 U3u), VMware Cloud Foundation (4.x, 3.x) | — | No fix listed | CNA |
- VMware vCenter Server, VMware Cloud Foundation Vendor— Affected VMware (7.0 prior to 7.0 U3i, 6.7 prior to 6.7.0 U3s, 6.5 prior to 6.5 U3u), VMware Cloud Foundation (4.x, 3.x) Fixed in — No fix listed CNA
CPE configurations NVD · 104
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:vmware:cloud_foundation:3.0:*:*:*:*:*:*:* | 3.0 | Vulnerable | VMware |
| cpe:2.3:a:vmware:cloud_foundation:3.0.1:*:*:*:*:*:*:* | 3.0.1 | Vulnerable | VMware |
| cpe:2.3:a:vmware:cloud_foundation:3.0.1.1:*:*:*:*:*:*:* | 3.0.1.1 | Vulnerable | VMware |
| cpe:2.3:a:vmware:cloud_foundation:3.5:*:*:*:*:*:*:* | 3.5 | Vulnerable | VMware |
| cpe:2.3:a:vmware:cloud_foundation:3.5.1:*:*:*:*:*:*:* | 3.5.1 | Vulnerable | VMware |
| cpe:2.3:a:vmware:cloud_foundation:3.7:*:*:*:*:*:*:* | 3.7 | Vulnerable | VMware |
| cpe:2.3:a:vmware:cloud_foundation:3.7.1:*:*:*:*:*:*:* | 3.7.1 | Vulnerable | VMware |
| cpe:2.3:a:vmware:cloud_foundation:3.7.2:*:*:*:*:*:*:* | 3.7.2 | Vulnerable | VMware |
| cpe:2.3:a:vmware:cloud_foundation:3.8:*:*:*:*:*:*:* | 3.8 | Vulnerable | VMware |
| cpe:2.3:a:vmware:cloud_foundation:3.8.1:*:*:*:*:*:*:* | 3.8.1 | Vulnerable | VMware |
- cpe:2.3:a:vmware:cloud_foundation:3.0:*:*:*:*:*:*:* Versions 3.0 Vulnerable ·VMware
- cpe:2.3:a:vmware:cloud_foundation:3.0.1:*:*:*:*:*:*:* Versions 3.0.1 Vulnerable ·VMware
- cpe:2.3:a:vmware:cloud_foundation:3.0.1.1:*:*:*:*:*:*:* Versions 3.0.1.1 Vulnerable ·VMware
- cpe:2.3:a:vmware:cloud_foundation:3.5:*:*:*:*:*:*:* Versions 3.5 Vulnerable ·VMware
- cpe:2.3:a:vmware:cloud_foundation:3.5.1:*:*:*:*:*:*:* Versions 3.5.1 Vulnerable ·VMware
- cpe:2.3:a:vmware:cloud_foundation:3.7:*:*:*:*:*:*:* Versions 3.7 Vulnerable ·VMware
- cpe:2.3:a:vmware:cloud_foundation:3.7.1:*:*:*:*:*:*:* Versions 3.7.1 Vulnerable ·VMware
- cpe:2.3:a:vmware:cloud_foundation:3.7.2:*:*:*:*:*:*:* Versions 3.7.2 Vulnerable ·VMware
- cpe:2.3:a:vmware:cloud_foundation:3.8:*:*:*:*:*:*:* Versions 3.8 Vulnerable ·VMware
- cpe:2.3:a:vmware:cloud_foundation:3.8.1:*:*:*:*:*:*:* Versions 3.8.1 Vulnerable ·VMware
Show 94 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:vmware:cloud_foundation:3.9:*:*:*:*:*:*:* | 3.9 | Vulnerable | VMware |
| cpe:2.3:a:vmware:cloud_foundation:3.9.1:*:*:*:*:*:*:* | 3.9.1 | Vulnerable | VMware |
| cpe:2.3:a:vmware:cloud_foundation:3.10:*:*:*:*:*:*:* | 3.10 | Vulnerable | VMware |
| cpe:2.3:a:vmware:cloud_foundation:3.10.1:*:*:*:*:*:*:* | 3.10.1 | Vulnerable | VMware |
| cpe:2.3:a:vmware:cloud_foundation:3.10.1.1:*:*:*:*:*:*:* | 3.10.1.1 | Vulnerable | VMware |
| cpe:2.3:a:vmware:cloud_foundation:3.10.1.2:*:*:*:*:*:*:* | 3.10.1.2 | Vulnerable | VMware |
| cpe:2.3:a:vmware:cloud_foundation:3.10.2:*:*:*:*:*:*:* | 3.10.2 | Vulnerable | VMware |
| cpe:2.3:a:vmware:cloud_foundation:3.10.2.1:*:*:*:*:*:*:* | 3.10.2.1 | Vulnerable | VMware |
| cpe:2.3:a:vmware:cloud_foundation:3.10.2.2:*:*:*:*:*:*:* | 3.10.2.2 | Vulnerable | VMware |
| cpe:2.3:a:vmware:cloud_foundation:3.11:*:*:*:*:*:*:* | 3.11 | Vulnerable | VMware |
| cpe:2.3:a:vmware:cloud_foundation:4.0:*:*:*:*:*:*:* | 4.0 | Vulnerable | VMware |
| cpe:2.3:a:vmware:cloud_foundation:4.0.1:*:*:*:*:*:*:* | 4.0.1 | Vulnerable | VMware |
| cpe:2.3:a:vmware:cloud_foundation:4.1:*:*:*:*:*:*:* | 4.1 | Vulnerable | VMware |
| cpe:2.3:a:vmware:cloud_foundation:4.1.0.1:*:*:*:*:*:*:* | 4.1.0.1 | Vulnerable | VMware |
| cpe:2.3:a:vmware:cloud_foundation:4.2:*:*:*:*:*:*:* | 4.2 | Vulnerable | VMware |
| cpe:2.3:a:vmware:cloud_foundation:4.2.1:*:*:*:*:*:*:* | 4.2.1 | Vulnerable | VMware |
| cpe:2.3:a:vmware:cloud_foundation:4.3:*:*:*:*:*:*:* | 4.3 | Vulnerable | VMware |
| cpe:2.3:a:vmware:cloud_foundation:4.3.1:*:*:*:*:*:*:* | 4.3.1 | Vulnerable | VMware |
| cpe:2.3:a:vmware:cloud_foundation:4.4:*:*:*:*:*:*:* | 4.4 | Vulnerable | VMware |
| cpe:2.3:a:vmware:cloud_foundation:4.4.1:*:*:*:*:*:*:* | 4.4.1 | Vulnerable | VMware |
| cpe:2.3:a:vmware:cloud_foundation:4.4.1.1:*:*:*:*:*:*:* | 4.4.1.1 | Vulnerable | VMware |
| cpe:2.3:a:vmware:vcenter_server:6.5:-:*:*:*:*:*:* | 6.5 | Vulnerable | VMware |
| cpe:2.3:a:vmware:vcenter_server:6.5:a:*:*:*:*:*:* | 6.5 a | Vulnerable | VMware |
| cpe:2.3:a:vmware:vcenter_server:6.5:b:*:*:*:*:*:* | 6.5 b | Vulnerable | VMware |
| cpe:2.3:a:vmware:vcenter_server:6.5:c:*:*:*:*:*:* | 6.5 c | Vulnerable | VMware |
| cpe:2.3:a:vmware:vcenter_server:6.5:d:*:*:*:*:*:* | 6.5 d | Vulnerable | VMware |
| cpe:2.3:a:vmware:vcenter_server:6.5:e:*:*:*:*:*:* | 6.5 e | Vulnerable | VMware |
| cpe:2.3:a:vmware:vcenter_server:6.5:f:*:*:*:*:*:* | 6.5 f | Vulnerable | VMware |
| cpe:2.3:a:vmware:vcenter_server:6.5:update1:*:*:*:*:*:* | 6.5 update1 | Vulnerable | VMware |
| cpe:2.3:a:vmware:vcenter_server:6.5:update1b:*:*:*:*:*:* | 6.5 update1b | Vulnerable | VMware |
| cpe:2.3:a:vmware:vcenter_server:6.5:update1c:*:*:*:*:*:* | 6.5 update1c | Vulnerable | VMware |
| cpe:2.3:a:vmware:vcenter_server:6.5:update1d:*:*:*:*:*:* | 6.5 update1d | Vulnerable | VMware |
| cpe:2.3:a:vmware:vcenter_server:6.5:update1e:*:*:*:*:*:* | 6.5 update1e | Vulnerable | VMware |
| cpe:2.3:a:vmware:vcenter_server:6.5:update1g:*:*:*:*:*:* | 6.5 update1g | Vulnerable | VMware |
| cpe:2.3:a:vmware:vcenter_server:6.5:update2:*:*:*:*:*:* | 6.5 update2 | Vulnerable | VMware |
| cpe:2.3:a:vmware:vcenter_server:6.5:update2b:*:*:*:*:*:* | 6.5 update2b | Vulnerable | VMware |
| cpe:2.3:a:vmware:vcenter_server:6.5:update2c:*:*:*:*:*:* | 6.5 update2c | Vulnerable | VMware |
| cpe:2.3:a:vmware:vcenter_server:6.5:update2d:*:*:*:*:*:* | 6.5 update2d | Vulnerable | VMware |
| cpe:2.3:a:vmware:vcenter_server:6.5:update2g:*:*:*:*:*:* | 6.5 update2g | Vulnerable | VMware |
| cpe:2.3:a:vmware:vcenter_server:6.5:update3:*:*:*:*:*:* | 6.5 update3 | Vulnerable | VMware |
| cpe:2.3:a:vmware:vcenter_server:6.5:update3d:*:*:*:*:*:* | 6.5 update3d | Vulnerable | VMware |
| cpe:2.3:a:vmware:vcenter_server:6.5:update3f:*:*:*:*:*:* | 6.5 update3f | Vulnerable | VMware |
| cpe:2.3:a:vmware:vcenter_server:6.5:update3k:*:*:*:*:*:* | 6.5 update3k | Vulnerable | VMware |
| cpe:2.3:a:vmware:vcenter_server:6.5:update3n:*:*:*:*:*:* | 6.5 update3n | Vulnerable | VMware |
| cpe:2.3:a:vmware:vcenter_server:6.5:update3p:*:*:*:*:*:* | 6.5 update3p | Vulnerable | VMware |
| cpe:2.3:a:vmware:vcenter_server:6.5:update3q:*:*:*:*:*:* | 6.5 update3q | Vulnerable | VMware |
| cpe:2.3:a:vmware:vcenter_server:6.5:update3r:*:*:*:*:*:* | 6.5 update3r | Vulnerable | VMware |
| cpe:2.3:a:vmware:vcenter_server:6.5:update3s:*:*:*:*:*:* | 6.5 update3s | Vulnerable | VMware |
| cpe:2.3:a:vmware:vcenter_server:6.5:update3t:*:*:*:*:*:* | 6.5 update3t | Vulnerable | VMware |
| cpe:2.3:a:vmware:vcenter_server:6.7:-:*:*:*:*:*:* | 6.7 | Vulnerable | VMware |
| cpe:2.3:a:vmware:vcenter_server:6.7:a:*:*:*:*:*:* | 6.7 a | Vulnerable | VMware |
| cpe:2.3:a:vmware:vcenter_server:6.7:b:*:*:*:*:*:* | 6.7 b | Vulnerable | VMware |
| cpe:2.3:a:vmware:vcenter_server:6.7:d:*:*:*:*:*:* | 6.7 d | Vulnerable | VMware |
| cpe:2.3:a:vmware:vcenter_server:6.7:update_3o:*:*:*:*:*:* | 6.7 update_3o | Vulnerable | VMware |
| cpe:2.3:a:vmware:vcenter_server:6.7:update1:*:*:*:*:*:* | 6.7 update1 | Vulnerable | VMware |
| cpe:2.3:a:vmware:vcenter_server:6.7:update1b:*:*:*:*:*:* | 6.7 update1b | Vulnerable | VMware |
| cpe:2.3:a:vmware:vcenter_server:6.7:update2:*:*:*:*:*:* | 6.7 update2 | Vulnerable | VMware |
| cpe:2.3:a:vmware:vcenter_server:6.7:update2a:*:*:*:*:*:* | 6.7 update2a | Vulnerable | VMware |
| cpe:2.3:a:vmware:vcenter_server:6.7:update2c:*:*:*:*:*:* | 6.7 update2c | Vulnerable | VMware |
| cpe:2.3:a:vmware:vcenter_server:6.7:update3:*:*:*:*:*:* | 6.7 update3 | Vulnerable | VMware |
| cpe:2.3:a:vmware:vcenter_server:6.7:update3a:*:*:*:*:*:* | 6.7 update3a | Vulnerable | VMware |
| cpe:2.3:a:vmware:vcenter_server:6.7:update3b:*:*:*:*:*:* | 6.7 update3b | Vulnerable | VMware |
| cpe:2.3:a:vmware:vcenter_server:6.7:update3f:*:*:*:*:*:* | 6.7 update3f | Vulnerable | VMware |
| cpe:2.3:a:vmware:vcenter_server:6.7:update3g:*:*:*:*:*:* | 6.7 update3g | Vulnerable | VMware |
| cpe:2.3:a:vmware:vcenter_server:6.7:update3j:*:*:*:*:*:* | 6.7 update3j | Vulnerable | VMware |
| cpe:2.3:a:vmware:vcenter_server:6.7:update3l:*:*:*:*:*:* | 6.7 update3l | Vulnerable | VMware |
| cpe:2.3:a:vmware:vcenter_server:6.7:update3m:*:*:*:*:*:* | 6.7 update3m | Vulnerable | VMware |
| cpe:2.3:a:vmware:vcenter_server:6.7:update3n:*:*:*:*:*:* | 6.7 update3n | Vulnerable | VMware |
| cpe:2.3:a:vmware:vcenter_server:6.7:update3o:*:*:*:*:*:* | 6.7 update3o | Vulnerable | VMware |
| cpe:2.3:a:vmware:vcenter_server:6.7:update3p:*:*:*:*:*:* | 6.7 update3p | Vulnerable | VMware |
| cpe:2.3:a:vmware:vcenter_server:6.7:update3q:*:*:*:*:*:* | 6.7 update3q | Vulnerable | VMware |
| cpe:2.3:a:vmware:vcenter_server:6.7:update3r:*:*:*:*:*:* | 6.7 update3r | Vulnerable | VMware |
| cpe:2.3:a:vmware:vcenter_server:7.0:-:*:*:*:*:*:* | 7.0 | Vulnerable | VMware |
| cpe:2.3:a:vmware:vcenter_server:7.0:a:*:*:*:*:*:* | 7.0 a | Vulnerable | VMware |
| cpe:2.3:a:vmware:vcenter_server:7.0:b:*:*:*:*:*:* | 7.0 b | Vulnerable | VMware |
| cpe:2.3:a:vmware:vcenter_server:7.0:c:*:*:*:*:*:* | 7.0 c | Vulnerable | VMware |
| cpe:2.3:a:vmware:vcenter_server:7.0:d:*:*:*:*:*:* | 7.0 d | Vulnerable | VMware |
| cpe:2.3:a:vmware:vcenter_server:7.0:update1:*:*:*:*:*:* | 7.0 update1 | Vulnerable | VMware |
| cpe:2.3:a:vmware:vcenter_server:7.0:update1a:*:*:*:*:*:* | 7.0 update1a | Vulnerable | VMware |
| cpe:2.3:a:vmware:vcenter_server:7.0:update1c:*:*:*:*:*:* | 7.0 update1c | Vulnerable | VMware |
| cpe:2.3:a:vmware:vcenter_server:7.0:update1d:*:*:*:*:*:* | 7.0 update1d | Vulnerable | VMware |
| cpe:2.3:a:vmware:vcenter_server:7.0:update2:*:*:*:*:*:* | 7.0 update2 | Vulnerable | VMware |
| cpe:2.3:a:vmware:vcenter_server:7.0:update2a:*:*:*:*:*:* | 7.0 update2a | Vulnerable | VMware |
| cpe:2.3:a:vmware:vcenter_server:7.0:update2b:*:*:*:*:*:* | 7.0 update2b | Vulnerable | VMware |
| cpe:2.3:a:vmware:vcenter_server:7.0:update2c:*:*:*:*:*:* | 7.0 update2c | Vulnerable | VMware |
| cpe:2.3:a:vmware:vcenter_server:7.0:update2d:*:*:*:*:*:* | 7.0 update2d | Vulnerable | VMware |
| cpe:2.3:a:vmware:vcenter_server:7.0:update3:*:*:*:*:*:* | 7.0 update3 | Vulnerable | VMware |
| cpe:2.3:a:vmware:vcenter_server:7.0:update3a:*:*:*:*:*:* | 7.0 update3a | Vulnerable | VMware |
| cpe:2.3:a:vmware:vcenter_server:7.0:update3c:*:*:*:*:*:* | 7.0 update3c | Vulnerable | VMware |
| cpe:2.3:a:vmware:vcenter_server:7.0:update3d:*:*:*:*:*:* | 7.0 update3d | Vulnerable | VMware |
| cpe:2.3:a:vmware:vcenter_server:7.0:update3e:*:*:*:*:*:* | 7.0 update3e | Vulnerable | VMware |
| cpe:2.3:a:vmware:vcenter_server:7.0:update3f:*:*:*:*:*:* | 7.0 update3f | Vulnerable | VMware |
| cpe:2.3:a:vmware:vcenter_server:7.0:update3g:*:*:*:*:*:* | 7.0 update3g | Vulnerable | VMware |
| cpe:2.3:a:vmware:vcenter_server:7.0:update3h:*:*:*:*:*:* | 7.0 update3h | Vulnerable | VMware |
- cpe:2.3:a:vmware:cloud_foundation:3.9:*:*:*:*:*:*:* Versions 3.9 Vulnerable ·VMware
- cpe:2.3:a:vmware:cloud_foundation:3.9.1:*:*:*:*:*:*:* Versions 3.9.1 Vulnerable ·VMware
- cpe:2.3:a:vmware:cloud_foundation:3.10:*:*:*:*:*:*:* Versions 3.10 Vulnerable ·VMware
- cpe:2.3:a:vmware:cloud_foundation:3.10.1:*:*:*:*:*:*:* Versions 3.10.1 Vulnerable ·VMware
- cpe:2.3:a:vmware:cloud_foundation:3.10.1.1:*:*:*:*:*:*:* Versions 3.10.1.1 Vulnerable ·VMware
- cpe:2.3:a:vmware:cloud_foundation:3.10.1.2:*:*:*:*:*:*:* Versions 3.10.1.2 Vulnerable ·VMware
- cpe:2.3:a:vmware:cloud_foundation:3.10.2:*:*:*:*:*:*:* Versions 3.10.2 Vulnerable ·VMware
- cpe:2.3:a:vmware:cloud_foundation:3.10.2.1:*:*:*:*:*:*:* Versions 3.10.2.1 Vulnerable ·VMware
- cpe:2.3:a:vmware:cloud_foundation:3.10.2.2:*:*:*:*:*:*:* Versions 3.10.2.2 Vulnerable ·VMware
- cpe:2.3:a:vmware:cloud_foundation:3.11:*:*:*:*:*:*:* Versions 3.11 Vulnerable ·VMware
- cpe:2.3:a:vmware:cloud_foundation:4.0:*:*:*:*:*:*:* Versions 4.0 Vulnerable ·VMware
- cpe:2.3:a:vmware:cloud_foundation:4.0.1:*:*:*:*:*:*:* Versions 4.0.1 Vulnerable ·VMware
- cpe:2.3:a:vmware:cloud_foundation:4.1:*:*:*:*:*:*:* Versions 4.1 Vulnerable ·VMware
- cpe:2.3:a:vmware:cloud_foundation:4.1.0.1:*:*:*:*:*:*:* Versions 4.1.0.1 Vulnerable ·VMware
- cpe:2.3:a:vmware:cloud_foundation:4.2:*:*:*:*:*:*:* Versions 4.2 Vulnerable ·VMware
- cpe:2.3:a:vmware:cloud_foundation:4.2.1:*:*:*:*:*:*:* Versions 4.2.1 Vulnerable ·VMware
- cpe:2.3:a:vmware:cloud_foundation:4.3:*:*:*:*:*:*:* Versions 4.3 Vulnerable ·VMware
- cpe:2.3:a:vmware:cloud_foundation:4.3.1:*:*:*:*:*:*:* Versions 4.3.1 Vulnerable ·VMware
- cpe:2.3:a:vmware:cloud_foundation:4.4:*:*:*:*:*:*:* Versions 4.4 Vulnerable ·VMware
- cpe:2.3:a:vmware:cloud_foundation:4.4.1:*:*:*:*:*:*:* Versions 4.4.1 Vulnerable ·VMware
- cpe:2.3:a:vmware:cloud_foundation:4.4.1.1:*:*:*:*:*:*:* Versions 4.4.1.1 Vulnerable ·VMware
- cpe:2.3:a:vmware:vcenter_server:6.5:-:*:*:*:*:*:* Versions 6.5 Vulnerable ·VMware
- cpe:2.3:a:vmware:vcenter_server:6.5:a:*:*:*:*:*:* Versions 6.5 a Vulnerable ·VMware
- cpe:2.3:a:vmware:vcenter_server:6.5:b:*:*:*:*:*:* Versions 6.5 b Vulnerable ·VMware
- cpe:2.3:a:vmware:vcenter_server:6.5:c:*:*:*:*:*:* Versions 6.5 c Vulnerable ·VMware
- cpe:2.3:a:vmware:vcenter_server:6.5:d:*:*:*:*:*:* Versions 6.5 d Vulnerable ·VMware
- cpe:2.3:a:vmware:vcenter_server:6.5:e:*:*:*:*:*:* Versions 6.5 e Vulnerable ·VMware
- cpe:2.3:a:vmware:vcenter_server:6.5:f:*:*:*:*:*:* Versions 6.5 f Vulnerable ·VMware
- cpe:2.3:a:vmware:vcenter_server:6.5:update1:*:*:*:*:*:* Versions 6.5 update1 Vulnerable ·VMware
- cpe:2.3:a:vmware:vcenter_server:6.5:update1b:*:*:*:*:*:* Versions 6.5 update1b Vulnerable ·VMware
- cpe:2.3:a:vmware:vcenter_server:6.5:update1c:*:*:*:*:*:* Versions 6.5 update1c Vulnerable ·VMware
- cpe:2.3:a:vmware:vcenter_server:6.5:update1d:*:*:*:*:*:* Versions 6.5 update1d Vulnerable ·VMware
- cpe:2.3:a:vmware:vcenter_server:6.5:update1e:*:*:*:*:*:* Versions 6.5 update1e Vulnerable ·VMware
- cpe:2.3:a:vmware:vcenter_server:6.5:update1g:*:*:*:*:*:* Versions 6.5 update1g Vulnerable ·VMware
- cpe:2.3:a:vmware:vcenter_server:6.5:update2:*:*:*:*:*:* Versions 6.5 update2 Vulnerable ·VMware
- cpe:2.3:a:vmware:vcenter_server:6.5:update2b:*:*:*:*:*:* Versions 6.5 update2b Vulnerable ·VMware
- cpe:2.3:a:vmware:vcenter_server:6.5:update2c:*:*:*:*:*:* Versions 6.5 update2c Vulnerable ·VMware
- cpe:2.3:a:vmware:vcenter_server:6.5:update2d:*:*:*:*:*:* Versions 6.5 update2d Vulnerable ·VMware
- cpe:2.3:a:vmware:vcenter_server:6.5:update2g:*:*:*:*:*:* Versions 6.5 update2g Vulnerable ·VMware
- cpe:2.3:a:vmware:vcenter_server:6.5:update3:*:*:*:*:*:* Versions 6.5 update3 Vulnerable ·VMware
- cpe:2.3:a:vmware:vcenter_server:6.5:update3d:*:*:*:*:*:* Versions 6.5 update3d Vulnerable ·VMware
- cpe:2.3:a:vmware:vcenter_server:6.5:update3f:*:*:*:*:*:* Versions 6.5 update3f Vulnerable ·VMware
- cpe:2.3:a:vmware:vcenter_server:6.5:update3k:*:*:*:*:*:* Versions 6.5 update3k Vulnerable ·VMware
- cpe:2.3:a:vmware:vcenter_server:6.5:update3n:*:*:*:*:*:* Versions 6.5 update3n Vulnerable ·VMware
- cpe:2.3:a:vmware:vcenter_server:6.5:update3p:*:*:*:*:*:* Versions 6.5 update3p Vulnerable ·VMware
- cpe:2.3:a:vmware:vcenter_server:6.5:update3q:*:*:*:*:*:* Versions 6.5 update3q Vulnerable ·VMware
- cpe:2.3:a:vmware:vcenter_server:6.5:update3r:*:*:*:*:*:* Versions 6.5 update3r Vulnerable ·VMware
- cpe:2.3:a:vmware:vcenter_server:6.5:update3s:*:*:*:*:*:* Versions 6.5 update3s Vulnerable ·VMware
- cpe:2.3:a:vmware:vcenter_server:6.5:update3t:*:*:*:*:*:* Versions 6.5 update3t Vulnerable ·VMware
- cpe:2.3:a:vmware:vcenter_server:6.7:-:*:*:*:*:*:* Versions 6.7 Vulnerable ·VMware
- cpe:2.3:a:vmware:vcenter_server:6.7:a:*:*:*:*:*:* Versions 6.7 a Vulnerable ·VMware
- cpe:2.3:a:vmware:vcenter_server:6.7:b:*:*:*:*:*:* Versions 6.7 b Vulnerable ·VMware
- cpe:2.3:a:vmware:vcenter_server:6.7:d:*:*:*:*:*:* Versions 6.7 d Vulnerable ·VMware
- cpe:2.3:a:vmware:vcenter_server:6.7:update_3o:*:*:*:*:*:* Versions 6.7 update_3o Vulnerable ·VMware
- cpe:2.3:a:vmware:vcenter_server:6.7:update1:*:*:*:*:*:* Versions 6.7 update1 Vulnerable ·VMware
- cpe:2.3:a:vmware:vcenter_server:6.7:update1b:*:*:*:*:*:* Versions 6.7 update1b Vulnerable ·VMware
- cpe:2.3:a:vmware:vcenter_server:6.7:update2:*:*:*:*:*:* Versions 6.7 update2 Vulnerable ·VMware
- cpe:2.3:a:vmware:vcenter_server:6.7:update2a:*:*:*:*:*:* Versions 6.7 update2a Vulnerable ·VMware
- cpe:2.3:a:vmware:vcenter_server:6.7:update2c:*:*:*:*:*:* Versions 6.7 update2c Vulnerable ·VMware
- cpe:2.3:a:vmware:vcenter_server:6.7:update3:*:*:*:*:*:* Versions 6.7 update3 Vulnerable ·VMware
- cpe:2.3:a:vmware:vcenter_server:6.7:update3a:*:*:*:*:*:* Versions 6.7 update3a Vulnerable ·VMware
- cpe:2.3:a:vmware:vcenter_server:6.7:update3b:*:*:*:*:*:* Versions 6.7 update3b Vulnerable ·VMware
- cpe:2.3:a:vmware:vcenter_server:6.7:update3f:*:*:*:*:*:* Versions 6.7 update3f Vulnerable ·VMware
- cpe:2.3:a:vmware:vcenter_server:6.7:update3g:*:*:*:*:*:* Versions 6.7 update3g Vulnerable ·VMware
- cpe:2.3:a:vmware:vcenter_server:6.7:update3j:*:*:*:*:*:* Versions 6.7 update3j Vulnerable ·VMware
- cpe:2.3:a:vmware:vcenter_server:6.7:update3l:*:*:*:*:*:* Versions 6.7 update3l Vulnerable ·VMware
- cpe:2.3:a:vmware:vcenter_server:6.7:update3m:*:*:*:*:*:* Versions 6.7 update3m Vulnerable ·VMware
- cpe:2.3:a:vmware:vcenter_server:6.7:update3n:*:*:*:*:*:* Versions 6.7 update3n Vulnerable ·VMware
- cpe:2.3:a:vmware:vcenter_server:6.7:update3o:*:*:*:*:*:* Versions 6.7 update3o Vulnerable ·VMware
- cpe:2.3:a:vmware:vcenter_server:6.7:update3p:*:*:*:*:*:* Versions 6.7 update3p Vulnerable ·VMware
- cpe:2.3:a:vmware:vcenter_server:6.7:update3q:*:*:*:*:*:* Versions 6.7 update3q Vulnerable ·VMware
- cpe:2.3:a:vmware:vcenter_server:6.7:update3r:*:*:*:*:*:* Versions 6.7 update3r Vulnerable ·VMware
- cpe:2.3:a:vmware:vcenter_server:7.0:-:*:*:*:*:*:* Versions 7.0 Vulnerable ·VMware
- cpe:2.3:a:vmware:vcenter_server:7.0:a:*:*:*:*:*:* Versions 7.0 a Vulnerable ·VMware
- cpe:2.3:a:vmware:vcenter_server:7.0:b:*:*:*:*:*:* Versions 7.0 b Vulnerable ·VMware
- cpe:2.3:a:vmware:vcenter_server:7.0:c:*:*:*:*:*:* Versions 7.0 c Vulnerable ·VMware
- cpe:2.3:a:vmware:vcenter_server:7.0:d:*:*:*:*:*:* Versions 7.0 d Vulnerable ·VMware
- cpe:2.3:a:vmware:vcenter_server:7.0:update1:*:*:*:*:*:* Versions 7.0 update1 Vulnerable ·VMware
- cpe:2.3:a:vmware:vcenter_server:7.0:update1a:*:*:*:*:*:* Versions 7.0 update1a Vulnerable ·VMware
- cpe:2.3:a:vmware:vcenter_server:7.0:update1c:*:*:*:*:*:* Versions 7.0 update1c Vulnerable ·VMware
- cpe:2.3:a:vmware:vcenter_server:7.0:update1d:*:*:*:*:*:* Versions 7.0 update1d Vulnerable ·VMware
- cpe:2.3:a:vmware:vcenter_server:7.0:update2:*:*:*:*:*:* Versions 7.0 update2 Vulnerable ·VMware
- cpe:2.3:a:vmware:vcenter_server:7.0:update2a:*:*:*:*:*:* Versions 7.0 update2a Vulnerable ·VMware
- cpe:2.3:a:vmware:vcenter_server:7.0:update2b:*:*:*:*:*:* Versions 7.0 update2b Vulnerable ·VMware
- cpe:2.3:a:vmware:vcenter_server:7.0:update2c:*:*:*:*:*:* Versions 7.0 update2c Vulnerable ·VMware
- cpe:2.3:a:vmware:vcenter_server:7.0:update2d:*:*:*:*:*:* Versions 7.0 update2d Vulnerable ·VMware
- cpe:2.3:a:vmware:vcenter_server:7.0:update3:*:*:*:*:*:* Versions 7.0 update3 Vulnerable ·VMware
- cpe:2.3:a:vmware:vcenter_server:7.0:update3a:*:*:*:*:*:* Versions 7.0 update3a Vulnerable ·VMware
- cpe:2.3:a:vmware:vcenter_server:7.0:update3c:*:*:*:*:*:* Versions 7.0 update3c Vulnerable ·VMware
- cpe:2.3:a:vmware:vcenter_server:7.0:update3d:*:*:*:*:*:* Versions 7.0 update3d Vulnerable ·VMware
- cpe:2.3:a:vmware:vcenter_server:7.0:update3e:*:*:*:*:*:* Versions 7.0 update3e Vulnerable ·VMware
- cpe:2.3:a:vmware:vcenter_server:7.0:update3f:*:*:*:*:*:* Versions 7.0 update3f Vulnerable ·VMware
- cpe:2.3:a:vmware:vcenter_server:7.0:update3g:*:*:*:*:*:* Versions 7.0 update3g Vulnerable ·VMware
- cpe:2.3:a:vmware:vcenter_server:7.0:update3h:*:*:*:*:*:* Versions 7.0 update3h Vulnerable ·VMware
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2022-31698
- 2026-10-03 Alias added: GHSA-9qpg-6x42-3rc4
References
More VMware Cloud Foundation vulnerabilities
- TI-2024-26040 Privilege escalation in VMware vCenter Server KEVCVSS 3.1CRITICAL 9.8
- TI-2024-26039 Heap-overflow in VMware vCenter Server KEVCVSS 3.1CRITICAL 9.8
- TI-2024-24610 Out-of-bounds write in VMware vCenter Server KEVCVSS 3.1CRITICAL 9.8
- TI-2022-07131 Code injection in VMware Workspace ONE Access and Identity Manager KEVCVSS 3.1CRITICAL 9.8
- TI-2021-05049 Path traversal in VMware vCenter Server, VMware Cloud Foundation KEVCVSS 3.1CRITICAL 9.8
- TI-2021-05029 Improper input validation in VMware vCenter Server and VMware Cloud Foundation KEVCVSS 3.1CRITICAL 9.8
Sources
- CVE-2022-31698 · CVE Program
- CVE-2022-31698 · NVD
- FIRST EPSS
- GHSA-9qpg-6x42-3rc4 · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences