CISA Known Exploited Vulnerability

This vulnerability is actively exploited in the wild and listed in the CISA Known Exploited Vulnerabilities catalog.

Remediation Deadline: Nov 17, 2021

High

CISA KEVEPSS 94.4%Ransomware

CVE-2021-21985

VMware—vCenter Server

VMware vSphere Client contains an improper input validation vulnerability in the Virtual SAN Health Check plug-in, which is enabled by default in vCenter Server, which allows for remote code execution.

EPSS — Exploit Probability

94.4%

Higher than 100.0% of all CVEs

Required Action

https://nvd.nist.gov/vuln/detail/CVE-2021-21985

Vulnerability Overview

Severity: High
EPSS: 94.4%
CISA KEV: Yes
Ransomware: Known
Published: Nov 3, 2021
KEV Added: Nov 3, 2021
Due Date: Nov 17, 2021
Related Articles: 0

Vendor

VMware

vCenter Server