{"cvss":5.3,"datePublished":"2022-03-07","dateUpdated":"2022-03-07","description":"VMware vCenter Server and Cloud Foundation Server contain a SSRF vulnerability due to improper validation of URLs in a vCenter Server plugin. This allows for information disclosure.","dueDate":"2022-03-21","id":"CVE-2021-21973","kev_catalogs":["cisa"],"knownRansomwareCampaignUse":"Unknown","notes":"https://nvd.nist.gov/vuln/detail/CVE-2021-21973","product":"vCenter Server and Cloud Foundation","requiredAction":"Apply updates per vendor instructions.","severity":"MEDIUM","source":"cisa_known_exploited","title":"VMware vCenter Server and Cloud Foundation Server Side Request Forgery (SSRF) Vulnerability","vendor":"VMware"}