CVE-2021-26987

CRITICAL

9.8

CVSS Severity Score

EPSS Score0.1630%

EPSS Percentile27.06th

Published2021年3月15日

Last Modified2024年11月21日

Vulnerability Description

Element Plug-in for vCenter Server incorporates SpringBoot Framework. SpringBoot Framework versions prior to 1.3.2 are susceptible to a vulnerability which when successfully exploited could lead to Remote Code Execution. All versions of Element Plug-in for vCenter Server, Management Services versions prior to 2.17.56 and Management Node versions through 12.2 contain vulnerable versions of SpringBoot Framework.

Affected Platforms (CPE)

📦

Vmware

Spring Boot

< 1.3.2

📦

Netapp

Element Plug In For Vcenter Server

All versions

📦

Netapp

Management Services For Element Software And Netapp Hci

< 2.17.56

📦

Netapp

Solidfire \& Hci Management Node

<= 12.2

References & Advisories

🔗 https://security.netapp.com/advisory/ntap-20210315-0001/

Vulnerability Description

Affected Platforms (CPE)

Spring Boot

Element Plug In For Vcenter Server

Management Services For Element Software And Netapp Hci

Solidfire \& Hci Management Node

References & Advisories

相關漏洞威脅