CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2022-31680

The vCenter Server contains an unsafe deserialisation vulnerability in the PSC (Platform services controller). A malicious actor with admin access on vCenter server may exploit this issue to execute arbitrary code on the underlying operating system that hosts the vCenter Server.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.008

EPSS Ranking 71.9%

CVSS Severity

CVSS v3 Score 9.1

References

Products affected by CVE-2022-31680

Vmware » Vcenter Server » Version: 4.0

cpe:2.3:a:vmware:vcenter_server:4.0
Vmware » Vcenter Server » Version: 4.0.0.10021

cpe:2.3:a:vmware:vcenter_server:4.0.0.10021
Vmware » Vcenter Server » Version: 4.0.0.12305

cpe:2.3:a:vmware:vcenter_server:4.0.0.12305
Vmware » Vcenter Server » Version: 4.1

cpe:2.3:a:vmware:vcenter_server:4.1
Vmware » Vcenter Server » Version: 4.1.0.12319

cpe:2.3:a:vmware:vcenter_server:4.1.0.12319
Vmware » Vcenter Server » Version: 4.1.0.14766

cpe:2.3:a:vmware:vcenter_server:4.1.0.14766
Vmware » Vcenter Server » Version: 4.1.0.17435

cpe:2.3:a:vmware:vcenter_server:4.1.0.17435
Vmware » Vcenter Server » Version: 5.0

cpe:2.3:a:vmware:vcenter_server:5.0
Vmware » Vcenter Server » Version: 5.0.0.16964

cpe:2.3:a:vmware:vcenter_server:5.0.0.16964
Vmware » Vcenter Server » Version: 5.5

cpe:2.3:a:vmware:vcenter_server:5.5
Vmware » Vcenter Server » Version: 6.0

cpe:2.3:a:vmware:vcenter_server:6.0
Vmware » Vcenter Server » Version: 6.5

cpe:2.3:a:vmware:vcenter_server:6.5

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2022-31680

Products

Pricing

Contact Us