CVE-2022-31698

Published: Dic 13, 2022 Last Modified: Ott 31, 2025 EU-VD ID: EUVD-2022-53118
ExploitDB:
Other exploit source:
Google Dorks:
MEDIUM 5,3
Attack Vector: network
Attack Complexity: low
Privileges Required: none
User Interaction: none
Scope: unchanged
Confidentiality: none
Integrity: none
Availability: low

Description

AI Translation Available

The vCenter Server contains a denial-of-service vulnerability in the content library service. A malicious actor with network access to port 443 on vCenter Server may exploit this issue to trigger a denial-of-service condition by sending a specially crafted header.

EPSS (Exploit Prediction Scoring System)

Trend Analysis

EPSS (Exploit Prediction Scoring System)

Prevede la probabilità di sfruttamento basata su intelligence sulle minacce e sulle caratteristiche della vulnerabilità.

EPSS Score
0,0350
Percentile
0,9th
Updated

EPSS Score Trend (Last 90 Days)

400

Uncontrolled Resource Consumption

Draft
Common Consequences
Security Scopes Affected:
Availability Access Control Other
Potential Impacts:
Dos: Crash, Exit, Or Restart Dos: Resource Consumption (Cpu) Dos: Resource Consumption (Memory) Dos: Resource Consumption (Other) Bypass Protection Mechanism Other
Applicable Platforms
All platforms may be affected
View CWE Details
Application

Vcenter Server by Vmware

cpe:2.3:a:vmware:vcenter_server:6.5:update1b:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Vcenter Server by Vmware

cpe:2.3:a:vmware:vcenter_server:7.0:update3h:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Vcenter Server by Vmware

cpe:2.3:a:vmware:vcenter_server:6.7:update3m:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Vcenter Server by Vmware

cpe:2.3:a:vmware:vcenter_server:6.7:update3n:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Vcenter Server by Vmware

cpe:2.3:a:vmware:vcenter_server:6.7:update3:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Vcenter Server by Vmware

cpe:2.3:a:vmware:vcenter_server:6.7:b:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Cloud Foundation by Vmware

cpe:2.3:a:vmware:cloud_foundation:3.5:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Vcenter Server by Vmware

cpe:2.3:a:vmware:vcenter_server:7.0:update2a:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Vcenter Server by Vmware

cpe:2.3:a:vmware:vcenter_server:6.5:update3f:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Vcenter Server by Vmware

cpe:2.3:a:vmware:vcenter_server:7.0:a:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Vcenter Server by Vmware

cpe:2.3:a:vmware:vcenter_server:7.0:update1c:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Cloud Foundation by Vmware

cpe:2.3:a:vmware:cloud_foundation:3.10.1:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Vcenter Server by Vmware

cpe:2.3:a:vmware:vcenter_server:6.7:update3q:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Vcenter Server by Vmware

cpe:2.3:a:vmware:vcenter_server:7.0:update2c:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Vcenter Server by Vmware

cpe:2.3:a:vmware:vcenter_server:6.5:update2b:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Vcenter Server by Vmware

cpe:2.3:a:vmware:vcenter_server:6.5:b:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Cloud Foundation by Vmware

cpe:2.3:a:vmware:cloud_foundation:4.4.1.1:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Vcenter Server by Vmware

cpe:2.3:a:vmware:vcenter_server:6.5:update2:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Vcenter Server by Vmware

cpe:2.3:a:vmware:vcenter_server:6.7:update1:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Vcenter Server by Vmware

cpe:2.3:a:vmware:vcenter_server:6.5:-:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Vcenter Server by Vmware

cpe:2.3:a:vmware:vcenter_server:6.7:update3a:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Vcenter Server by Vmware

cpe:2.3:a:vmware:vcenter_server:6.5:update3p:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Cloud Foundation by Vmware

cpe:2.3:a:vmware:cloud_foundation:3.8.1:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Vcenter Server by Vmware

cpe:2.3:a:vmware:vcenter_server:6.5:update1e:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Vcenter Server by Vmware

cpe:2.3:a:vmware:vcenter_server:6.5:update3s:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Vcenter Server by Vmware

cpe:2.3:a:vmware:vcenter_server:6.5:update3k:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Vcenter Server by Vmware

cpe:2.3:a:vmware:vcenter_server:6.7:update2a:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Cloud Foundation by Vmware

cpe:2.3:a:vmware:cloud_foundation:3.8:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Vcenter Server by Vmware

cpe:2.3:a:vmware:vcenter_server:6.7:update3f:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Cloud Foundation by Vmware

cpe:2.3:a:vmware:cloud_foundation:3.5.1:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Cloud Foundation by Vmware

cpe:2.3:a:vmware:cloud_foundation:3.0.1:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Cloud Foundation by Vmware

cpe:2.3:a:vmware:cloud_foundation:4.0:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Vcenter Server by Vmware

cpe:2.3:a:vmware:vcenter_server:6.7:update2c:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Vcenter Server by Vmware

cpe:2.3:a:vmware:vcenter_server:7.0:update3a:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Cloud Foundation by Vmware

cpe:2.3:a:vmware:cloud_foundation:3.7.2:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Cloud Foundation by Vmware

cpe:2.3:a:vmware:cloud_foundation:4.3.1:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Cloud Foundation by Vmware

cpe:2.3:a:vmware:cloud_foundation:3.11:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Vcenter Server by Vmware

cpe:2.3:a:vmware:vcenter_server:6.5:c:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Vcenter Server by Vmware

cpe:2.3:a:vmware:vcenter_server:6.5:update3:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Vcenter Server by Vmware

cpe:2.3:a:vmware:vcenter_server:6.7:update1b:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Vcenter Server by Vmware

cpe:2.3:a:vmware:vcenter_server:6.7:a:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Vcenter Server by Vmware

cpe:2.3:a:vmware:vcenter_server:7.0:update3c:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Vcenter Server by Vmware

cpe:2.3:a:vmware:vcenter_server:6.7:update3r:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Vcenter Server by Vmware

cpe:2.3:a:vmware:vcenter_server:7.0:-:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Vcenter Server by Vmware

cpe:2.3:a:vmware:vcenter_server:6.7:update3g:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Vcenter Server by Vmware

cpe:2.3:a:vmware:vcenter_server:7.0:update3:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Cloud Foundation by Vmware

cpe:2.3:a:vmware:cloud_foundation:3.10.2.2:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Cloud Foundation by Vmware

cpe:2.3:a:vmware:cloud_foundation:3.0:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Cloud Foundation by Vmware

cpe:2.3:a:vmware:cloud_foundation:4.4.1:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Vcenter Server by Vmware

cpe:2.3:a:vmware:vcenter_server:7.0:update1:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Cloud Foundation by Vmware

cpe:2.3:a:vmware:cloud_foundation:3.0.1.1:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Vcenter Server by Vmware

cpe:2.3:a:vmware:vcenter_server:6.5:update3r:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Vcenter Server by Vmware

cpe:2.3:a:vmware:vcenter_server:6.7:update3l:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Vcenter Server by Vmware

cpe:2.3:a:vmware:vcenter_server:6.7:update_3o:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Vcenter Server by Vmware

cpe:2.3:a:vmware:vcenter_server:6.5:e:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Vcenter Server by Vmware

cpe:2.3:a:vmware:vcenter_server:6.7:update3p:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Vcenter Server by Vmware

cpe:2.3:a:vmware:vcenter_server:6.5:update1:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Cloud Foundation by Vmware

cpe:2.3:a:vmware:cloud_foundation:3.7:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Vcenter Server by Vmware

cpe:2.3:a:vmware:vcenter_server:7.0:update1d:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Vcenter Server by Vmware

cpe:2.3:a:vmware:vcenter_server:6.5:update2d:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Vcenter Server by Vmware

cpe:2.3:a:vmware:vcenter_server:7.0:update1a:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Cloud Foundation by Vmware

cpe:2.3:a:vmware:cloud_foundation:3.10:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Cloud Foundation by Vmware

cpe:2.3:a:vmware:cloud_foundation:3.10.1.2:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Vcenter Server by Vmware

cpe:2.3:a:vmware:vcenter_server:6.7:d:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Vcenter Server by Vmware

cpe:2.3:a:vmware:vcenter_server:6.7:update3b:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Vcenter Server by Vmware

cpe:2.3:a:vmware:vcenter_server:7.0:update2b:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Cloud Foundation by Vmware

cpe:2.3:a:vmware:cloud_foundation:3.7.1:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Vcenter Server by Vmware

cpe:2.3:a:vmware:vcenter_server:7.0:update3g:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Vcenter Server by Vmware

cpe:2.3:a:vmware:vcenter_server:7.0:update3e:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Vcenter Server by Vmware

cpe:2.3:a:vmware:vcenter_server:6.5:update1c:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Vcenter Server by Vmware

cpe:2.3:a:vmware:vcenter_server:6.5:update1g:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Vcenter Server by Vmware

cpe:2.3:a:vmware:vcenter_server:7.0:d:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Cloud Foundation by Vmware

cpe:2.3:a:vmware:cloud_foundation:4.0.1:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Cloud Foundation by Vmware

cpe:2.3:a:vmware:cloud_foundation:3.10.2.1:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Vcenter Server by Vmware

cpe:2.3:a:vmware:vcenter_server:7.0:update3f:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Vcenter Server by Vmware

cpe:2.3:a:vmware:vcenter_server:7.0:update3d:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Vcenter Server by Vmware

cpe:2.3:a:vmware:vcenter_server:6.5:update3q:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Cloud Foundation by Vmware

cpe:2.3:a:vmware:cloud_foundation:4.3:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Vcenter Server by Vmware

cpe:2.3:a:vmware:vcenter_server:7.0:update2d:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Vcenter Server by Vmware

cpe:2.3:a:vmware:vcenter_server:6.5:f:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Vcenter Server by Vmware

cpe:2.3:a:vmware:vcenter_server:6.5:update3t:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Vcenter Server by Vmware

cpe:2.3:a:vmware:vcenter_server:6.5:update2c:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Cloud Foundation by Vmware

cpe:2.3:a:vmware:cloud_foundation:4.1.0.1:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Cloud Foundation by Vmware

cpe:2.3:a:vmware:cloud_foundation:4.1:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Vcenter Server by Vmware

cpe:2.3:a:vmware:vcenter_server:6.5:update3d:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Vcenter Server by Vmware

cpe:2.3:a:vmware:vcenter_server:6.5:a:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Vcenter Server by Vmware

cpe:2.3:a:vmware:vcenter_server:6.7:update3j:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Cloud Foundation by Vmware

cpe:2.3:a:vmware:cloud_foundation:3.10.1.1:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Vcenter Server by Vmware

cpe:2.3:a:vmware:vcenter_server:6.5:d:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Vcenter Server by Vmware

cpe:2.3:a:vmware:vcenter_server:6.5:update3n:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Cloud Foundation by Vmware

cpe:2.3:a:vmware:cloud_foundation:3.10.2:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Vcenter Server by Vmware

cpe:2.3:a:vmware:vcenter_server:6.5:update2g:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Cloud Foundation by Vmware

cpe:2.3:a:vmware:cloud_foundation:4.2.1:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Vcenter Server by Vmware

cpe:2.3:a:vmware:vcenter_server:7.0:c:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Cloud Foundation by Vmware

cpe:2.3:a:vmware:cloud_foundation:3.9.1:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Vcenter Server by Vmware

cpe:2.3:a:vmware:vcenter_server:6.7:-:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Cloud Foundation by Vmware

cpe:2.3:a:vmware:cloud_foundation:4.2:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Vcenter Server by Vmware

cpe:2.3:a:vmware:vcenter_server:6.7:update2:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Vcenter Server by Vmware

cpe:2.3:a:vmware:vcenter_server:6.7:update3o:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Vcenter Server by Vmware

cpe:2.3:a:vmware:vcenter_server:7.0:update2:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Vcenter Server by Vmware

cpe:2.3:a:vmware:vcenter_server:6.5:update1d:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Cloud Foundation by Vmware

cpe:2.3:a:vmware:cloud_foundation:4.4:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Cloud Foundation by Vmware

cpe:2.3:a:vmware:cloud_foundation:3.9:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Vcenter Server by Vmware

cpe:2.3:a:vmware:vcenter_server:7.0:b:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
https://www.talosintelligence.com/vulnerability_reports/TALOS-2022-1588
https://www.vmware.com/security/advisories/VMSA-2022-0030.html
https://www.talosintelligence.com/vulnerability_reports/TALOS-2022-1588
https://www.vmware.com/security/advisories/VMSA-2022-0030.html