← CVE Intelligence

CVE-2021-22016

n/a / VMware vCenter Server, VMware Cloud Foundation PUBLISHED

Description (CNA)

The vCenter Server contains a reflected cross-site scripting vulnerability due to a lack of input sanitization. An attacker may exploit this issue to execute malicious scripts by tricking a victim into clicking a malicious link.

Affected (CNA)

Vendor / productVersions
n/a / VMware vCenter Server, VMware Cloud Foundationaffected VMware vCenter Server 6.7 before 6.7 U3o and VMware Cloud Foundation 3.x before 3.10.2.2

CWE

No CWE identifiers supplied.

References

ADP enrichment

CVE

No English description supplied.