5.3

CVE-2022-31698

The vCenter Server contains a denial-of-service vulnerability in the content library service. A malicious actor with network access to port 443 on vCenter Server may exploit this issue to trigger a denial-of-service condition by sending a specially crafted header.

Data is provided by the National Vulnerability Database (NVD)
VMwareCloud Foundation Version3.0
VMwareCloud Foundation Version3.0.1
VMwareCloud Foundation Version3.0.1.1
VMwareCloud Foundation Version3.5
VMwareCloud Foundation Version3.5.1
VMwareCloud Foundation Version3.7
VMwareCloud Foundation Version3.7.1
VMwareCloud Foundation Version3.7.2
VMwareCloud Foundation Version3.8
VMwareCloud Foundation Version3.8.1
VMwareCloud Foundation Version3.9
VMwareCloud Foundation Version3.9.1
VMwareCloud Foundation Version3.10
VMwareCloud Foundation Version3.10.1
VMwareCloud Foundation Version3.10.1.1
VMwareCloud Foundation Version3.10.1.2
VMwareCloud Foundation Version3.10.2.1
VMwareCloud Foundation Version3.10.2.2
VMwareCloud Foundation Version3.11
VMwareCloud Foundation Version4.0
VMwareCloud Foundation Version4.0.1
VMwareCloud Foundation Version4.1
VMwareCloud Foundation Version4.1.0.1
VMwareCloud Foundation Version4.2
VMwareCloud Foundation Version4.2.1
VMwareCloud Foundation Version4.3
VMwareCloud Foundation Version4.3.1
VMwareCloud Foundation Version4.4
VMwareCloud Foundation Version4.4.1
VMwareCloud Foundation Version4.4.1.1
VMwareVcenter Server Version6.5 Update-
VMwareVcenter Server Version6.5 Updatea
VMwareVcenter Server Version6.5 Updateb
VMwareVcenter Server Version6.5 Updatec
VMwareVcenter Server Version6.5 Updated
VMwareVcenter Server Version6.5 Updatee
VMwareVcenter Server Version6.5 Updatef
VMwareVcenter Server Version6.5 Updateupdate1
VMwareVcenter Server Version6.5 Updateupdate1b
VMwareVcenter Server Version6.5 Updateupdate1c
VMwareVcenter Server Version6.5 Updateupdate1d
VMwareVcenter Server Version6.5 Updateupdate1e
VMwareVcenter Server Version6.5 Updateupdate1g
VMwareVcenter Server Version6.5 Updateupdate2
VMwareVcenter Server Version6.5 Updateupdate2b
VMwareVcenter Server Version6.5 Updateupdate2c
VMwareVcenter Server Version6.5 Updateupdate2d
VMwareVcenter Server Version6.5 Updateupdate2g
VMwareVcenter Server Version6.5 Updateupdate3
VMwareVcenter Server Version6.5 Updateupdate3d
VMwareVcenter Server Version6.5 Updateupdate3f
VMwareVcenter Server Version6.5 Updateupdate3k
VMwareVcenter Server Version6.5 Updateupdate3n
VMwareVcenter Server Version6.5 Updateupdate3p
VMwareVcenter Server Version6.5 Updateupdate3q
VMwareVcenter Server Version6.5 Updateupdate3r
VMwareVcenter Server Version6.5 Updateupdate3s
VMwareVcenter Server Version6.5 Updateupdate3t
VMwareVcenter Server Version6.7 Update-
VMwareVcenter Server Version6.7 Updatea
VMwareVcenter Server Version6.7 Updateb
VMwareVcenter Server Version6.7 Updated
VMwareVcenter Server Version6.7 Updateupdate_3o
VMwareVcenter Server Version6.7 Updateupdate1
VMwareVcenter Server Version6.7 Updateupdate1b
VMwareVcenter Server Version6.7 Updateupdate2
VMwareVcenter Server Version6.7 Updateupdate2a
VMwareVcenter Server Version6.7 Updateupdate2c
VMwareVcenter Server Version6.7 Updateupdate3
VMwareVcenter Server Version6.7 Updateupdate3a
VMwareVcenter Server Version6.7 Updateupdate3b
VMwareVcenter Server Version6.7 Updateupdate3f
VMwareVcenter Server Version6.7 Updateupdate3g
VMwareVcenter Server Version6.7 Updateupdate3j
VMwareVcenter Server Version6.7 Updateupdate3l
VMwareVcenter Server Version6.7 Updateupdate3m
VMwareVcenter Server Version6.7 Updateupdate3n
VMwareVcenter Server Version6.7 Updateupdate3o
VMwareVcenter Server Version6.7 Updateupdate3p
VMwareVcenter Server Version6.7 Updateupdate3q
VMwareVcenter Server Version6.7 Updateupdate3r
VMwareVcenter Server Version7.0 Update-
VMwareVcenter Server Version7.0 Updatea
VMwareVcenter Server Version7.0 Updateb
VMwareVcenter Server Version7.0 Updatec
VMwareVcenter Server Version7.0 Updated
VMwareVcenter Server Version7.0 Updateupdate1
VMwareVcenter Server Version7.0 Updateupdate1a
VMwareVcenter Server Version7.0 Updateupdate1c
VMwareVcenter Server Version7.0 Updateupdate1d
VMwareVcenter Server Version7.0 Updateupdate2
VMwareVcenter Server Version7.0 Updateupdate2a
VMwareVcenter Server Version7.0 Updateupdate2b
VMwareVcenter Server Version7.0 Updateupdate2c
VMwareVcenter Server Version7.0 Updateupdate2d
VMwareVcenter Server Version7.0 Updateupdate3
VMwareVcenter Server Version7.0 Updateupdate3a
VMwareVcenter Server Version7.0 Updateupdate3c
VMwareVcenter Server Version7.0 Updateupdate3d
VMwareVcenter Server Version7.0 Updateupdate3e
VMwareVcenter Server Version7.0 Updateupdate3f
VMwareVcenter Server Version7.0 Updateupdate3g
VMwareVcenter Server Version7.0 Updateupdate3h
VMwareCloud Foundation Version3.10.2
VMwareCloud Foundation Version4.1.0.1
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 3.39% 0.87
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 5.3 3.9 1.4
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
134c704f-9b21-4f2e-91b3-4a467353bcc0 5.3 3.9 1.4
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
CWE-400 Uncontrolled Resource Consumption

The product does not properly control the allocation and maintenance of a limited resource, thereby enabling an actor to influence the amount of resources consumed, eventually leading to the exhaustion of available resources.