Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
CVE coverage

CVE-2021-22005

CVSS 9.8 Actively exploited (KEV) 1 detection found
View on NVD →
The vCenter Server contains an arbitrary file upload vulnerability in the Analytics service. A malicious actor with network access to port 443 on vCenter Server may exploit this issue to execute code on vCenter Server by uploading a specially crafted file.

Detection rules

Source Rule Status Updated
sigma VMware vCenter Server File Upload CVE-2021-22005 test 2023-01-02