SARA / Free Tools / CVE / CVE-2021-21972

CVE-2021-21972 — The vSphere Client (HTML5) contains a remote code execution vulnerability in a v

The vSphere Client (HTML5) contains a remote code execution vulnerability in a vCenter Server plugin. A malicious actor with network access to port 443 may exploit this issue to execute commands with unrestricted privileges on the underlying operating system that hosts vCenter Se

CVSS
10.0 CISA
EPSS
99.52% (top 0.10%)
CWE
—
Published
2021-02-24T17:15:15.833
Last modified
2026-08-12T05:17:35.260
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA KEV — Actively Exploited
Added to KEV
2021-11-03
BOD 22-01 due
—
Ransomware use
Known
View KEV detail
CVE-2021-21972 on CISA KEV →

01What is this vulnerability?

The vSphere Client (HTML5) contains a remote code execution vulnerability in a vCenter Server plugin. A malicious actor with network access to port 443 may exploit this issue to execute commands with unrestricted privileges on the underlying operating system that hosts vCenter Server. This affects VMware vCenter Server (7.x before 7.0 U1c, 6.7 before 6.7 U3l and 6.5 before 6.5 U3n) and VMware…

02Affected products

No structured affected-product list available — see references below for vendor advisories.

03Active exploitation status

Yes — actively exploited. Added to the CISA KEV catalog on 2021-11-03. Ransomware use: Known.

04Recommended remediation

05Technical details

For the full vendor write-up, exploit chains, and reference implementations, see the references list in section 09.

06Detection signatures

Open the Sigma generator with a pre-filled prompt for this CVE to draft a starting detection in your stack of choice:

Open in Sigma generator →

07Related CVEs

No directly-cited follow-up CVEs in the KB record for this advisory. The references list in section 09 carries the vendor cross-references.

08Timeline

09References

Want this in your SOAR or SIEM?
SARA's API returns EPSS, CVSS, KEV, and an analyst-grade summary in one call.
Read the API reference →
EPSS detail → Search KEV → Ask SARA →