Total vulnerabilities in the database
The vCenter Server contains multiple denial-of-service vulnerabilities in VAPI (vCenter API) service. A malicious actor with network access to port 443 on vCenter Server may exploit these issues to create a denial of service condition due to excessive memory consumption by VAPI service.
| Software | From | Fixed in |
|---|---|---|
| vmware / vcenter_server | 6.7 | 6.7.x |
| vmware / vcenter_server | 7.0 | 7.0.x |
| vmware / cloud_foundation | 3.0 | 5.0 |