https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 12:11:07 +0000 https://cve.radiocsirt.org/vuln/bdu:2021-00989 bdu:2021-00989 https://cve.radiocsirt.org/vuln/bdu:2021-00989 https://cve.radiocsirt.org/vuln/certfr-2021-avi-145 certfr-2021-avi-145 https://cve.radiocsirt.org/vuln/certfr-2021-avi-145 https://cve.radiocsirt.org/vuln/cnvd-2021-12320 cnvd-2021-12320 https://cve.radiocsirt.org/vuln/cnvd-2021-12320 https://cve.radiocsirt.org/vuln/euvd-2026-256020 EUVD-2026-256020 https://cve.radiocsirt.org/vuln/euvd-2026-256020 https://cve.radiocsirt.org/vuln/fkie_cve-2021-21973 <p>The vSphere Client (HTML5) contains an SSRF (Server Side Request Forgery) vulnerability due to improper validation of URLs in a vCenter Server plugin. A malicious actor with network access to port 443 may exploit this issue by sending a POST request to vCenter Server plugin leading to information disclosure. This affects: VMware vCenter Server (7.x before 7.0 U1c, 6.7 before 6.7 U3l and 6.5 before 6.5 U3n) and VMware Cloud Foundation (4.x before 4.2 and 3.x before 3.10.1.2).</p> <p>The vSphere Client (HTML5) contains an SSRF (Server Side Request Forgery) vulnerability due to improper validation of URLs in a vCenter Server plugin. A malicious actor with network access to port 443 may exploit this issue by sending a POST request to vCenter Server plugin leading to information disclosure. This affects: VMware vCenter Server (7.x before 7.0 U1c, 6.7 before 6.7 U3l and 6.5 before 6.5 U3n) and VMware Cloud Foundation (4.x before 4.2 and 3.x before 3.10.1.2).</p> https://cve.radiocsirt.org/vuln/fkie_cve-2021-21973 https://cve.radiocsirt.org/vuln/ghsa-5j6h-79mj-qfq2 <p>The vSphere Client (HTML5) contains an SSRF (Server Side Request Forgery) vulnerability due to improper validation of URLs in a vCenter Server plugin. A malicious actor with network access to port 443 may exploit this issue by sending a POST request to vCenter Server plugin leading to information disclosure. This affects: VMware vCenter Server (7.x before 7.0 U1c, 6.7 before 6.7 U3l and 6.5 before 6.5 U3n) and VMware Cloud Foundation (4.x before 4.2 and 3.x before 3.10.1.2).</p> <p>The vSphere Client (HTML5) contains an SSRF (Server Side Request Forgery) vulnerability due to improper validation of URLs in a vCenter Server plugin. A malicious actor with network access to port 443 may exploit this issue by sending a POST request to vCenter Server plugin leading to information disclosure. This affects: VMware vCenter Server (7.x before 7.0 U1c, 6.7 before 6.7 U3l and 6.5 before 6.5 U3n) and VMware Cloud Foundation (4.x before 4.2 and 3.x before 3.10.1.2).</p> https://cve.radiocsirt.org/vuln/ghsa-5j6h-79mj-qfq2 https://cve.radiocsirt.org/vuln/gsd-2021-21973 gsd-2021-21973 https://cve.radiocsirt.org/vuln/gsd-2021-21973