CVE-2021-22017

🔥 Known Exploited (CISA KEV)MEDIUM

5.3

CVSS Severity Score

EPSS Score42.9240%

EPSS Percentile93.99th

Published2021-09-23

Last Modified2025-10-30

Data SourcesNVDCISA KEVFIRST.org EPSS

Vulnerability Description

Rhttproxy as used in vCenter Server contains a vulnerability due to improper implementation of URI normalization. A malicious actor with network access to port 443 on vCenter Server may exploit this issue to bypass proxy leading to internal endpoints being accessed.

Affected Platforms (CPE)

📦

Vmware

Vcenter Server

= 6.7

References & Advisories

🔗 https://www.vmware.com/security/advisories/VMSA-2021-0020.html

🔗 https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-22017

CVE-2021-22017

Vulnerability Description

Affected Platforms (CPE)

Vcenter Server

References & Advisories

関連するセキュリティ記事

デイリー・グローバル・サイバー脅威インテリジェンス・ダイジェスト｜2026年7月21日

関連する脆弱性情報