Lucene search

VmwareCVELIST:CVE-2021-21984

HistoryMay 07, 2021 - 11:20 a.m.

CVE-2021-21984

2021-05-0711:20:14

vmware

www.cve.org

vmware

vrealize business

remote code execution

vulnerability

unauthorised endpoint

AI Score

9.9

Confidence

High

EPSS

0.007

Percentile

80.7%

JSON

VMware vRealize Business for Cloud 7.x prior to 7.6.0 contains a remote code execution vulnerability due to an unauthorised end point. A malicious actor with network access may exploit this issue causing unauthorised remote code execution on vRealize Business for Cloud Virtual Appliance.

CNA Affected

[
  {
    "product": "VMware vRealize Business for Cloud",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "VMware vRealize Business for Cloud (7.x prior to 7.6.0)"
      }
    ]
  }
]

References

www.vmware.com/security/advisories/VMSA-2021-0007.html