CVE-2021-22005: listed in the CISA KEV catalog CVE-2021-22005 · CVSS 9.8 CRITICAL · EPSS 100.0% · KEV 2021-11-03
The vCenter Server contains an arbitrary file upload vulnerability in the Analytics service. A malicious actor with network access to port 443 on vCenter Server may exploit this issue to execute code on vCenter Server by uploading a specially crafted file.
Is CVE-2021-22005 exploited? Listed in the CISA KEV catalog on 2021-11-03. Federal remediation due 2021-11-17. Past that date by 1732 days. Used in ransomware campaigns. EPSS puts exploitation in the next 30 days at 100.0%. Public exploit code: packaged in a public tool. Public detection rules exist. Which products and versions are affected? No affected package list recorded here yet.
Is there a patch? No patch identifier recorded here yet.
What PlainSec published about CVE-2021-22005 Primary sources What this record does not say No affected package data. No patch identifier. KEV and EPSS are re-checked daily. Record last updated 2026-08-15.
CVE-2021-22005: listed in the CISA KEV catalog CVE-2021-22005 · CVSS 9.8 CRITICAL · EPSS 100.0% · KEV 2021-11-03
The vCenter Server contains an arbitrary file upload vulnerability in the Analytics service. A malicious actor with network access to port 443 on vCenter Server may exploit this issue to execute code on vCenter Server by uploading a specially crafted file.
Is CVE-2021-22005 exploited? Listed in the CISA KEV catalog on 2021-11-03. Federal remediation due 2021-11-17. Past that date by 1732 days. Used in ransomware campaigns. EPSS puts exploitation in the next 30 days at 100.0%. Public exploit code: packaged in a public tool. Public detection rules exist. Which products and versions are affected? No affected package list recorded here yet.
Is there a patch? No patch identifier recorded here yet.
What PlainSec published about CVE-2021-22005 Primary sources What this record does not say No affected package data. No patch identifier. KEV and EPSS are re-checked daily. Record last updated 2026-08-15.