Tracker / CVE-2021-22016
CVE-2021-22016
Medium 6.1
The vCenter Server contains a reflected cross-site scripting vulnerability due to a lack of input sanitization. An attacker may exploit this issue to execute malicious scripts by tricking a victim into clicking a malicious link.
Affected products and versions
| vmware | cloud_foundation · 3.0 → 5.0 |
|---|---|
| vmware | vcenter_server |
Analysis
This page is not indexable yet.Until it carries original analysis — what it actually exposes, how to check in two minutes whether a system was touched, what to do if it was — the page stays noindex. The database decides that, not the template.