# Vulnerabilities published in 2021 - [CVE-2021-2208](https://insights.sbomify.com/CVE-2021-2208/): Denial of service in MySQL Server (medium 4.9) - [CVE-2021-2207](https://insights.sbomify.com/CVE-2021-2207/): Other in Database - Enterprise Edition (low 2.3) - [CVE-2021-22060](https://insights.sbomify.com/CVE-2021-22060/): Log entry injection in Spring Framework (medium 4.3) - [CVE-2021-2206](https://insights.sbomify.com/CVE-2021-2206/): Other in Trade Management (high 8.2) - [CVE-2021-22057](https://insights.sbomify.com/CVE-2021-22057/): Auth bypass in VMware Workspace ONE Access (high 8.8) - [CVE-2021-22056](https://insights.sbomify.com/CVE-2021-22056/): Server-side request forgery in VMware Workspace ONE Access and Identity Manager (high 7.5) - [CVE-2021-22055](https://insights.sbomify.com/CVE-2021-22055/): Other in Photon OS (medium 5.3) - [CVE-2021-22054](https://insights.sbomify.com/CVE-2021-22054/): Omnissa Workspace ONE Server-Side Request Forgery (high 7.5, exploited in the wild) - [CVE-2021-22053](https://insights.sbomify.com/CVE-2021-22053/): Code injection in spring-cloud-netflix-hystrix-dashboard (high 8.8) - [CVE-2021-22051](https://insights.sbomify.com/CVE-2021-22051/): Request injection in Spring Cloud Gateway (medium 6.5) - [CVE-2021-22050](https://insights.sbomify.com/CVE-2021-22050/): Denial of service in VMware ESXi and VMware Cloud Foundation (high 7.5) - [CVE-2021-2205](https://insights.sbomify.com/CVE-2021-2205/): Other in Marketing (critical 9.1) - [CVE-2021-22049](https://insights.sbomify.com/CVE-2021-22049/): Server-side request forgery in VMware vCenter Server and VMware Cloud Foundation (critical 9.8) - [CVE-2021-22048](https://insights.sbomify.com/CVE-2021-22048/): Privilege escalation in VMware vCenter Server and VMware Cloud Foundation (high 8.8) - [CVE-2021-22047](https://insights.sbomify.com/CVE-2021-22047/): Exposure of Resource to Wrong Sphere in Spring Data REST (medium 5.3) - [CVE-2021-22045](https://insights.sbomify.com/CVE-2021-22045/): Memory corruption in VMware ESXi, VMware Workstation and VMware Fusion (high 7.8) - [CVE-2021-22044](https://insights.sbomify.com/CVE-2021-22044/): Exposure of Resource to Wrong Sphere in Spring Cloud OpenFeign (high 7.5) - [CVE-2021-22043](https://insights.sbomify.com/CVE-2021-22043/): Race condition in VMware ESXi and VMware Cloud Foundation (high 7.5) - [CVE-2021-22042](https://insights.sbomify.com/CVE-2021-22042/): Privilege escalation in VMware ESXi and VMware Cloud Foundation (high 7.8) - [CVE-2021-22041](https://insights.sbomify.com/CVE-2021-22041/): Race condition in VMware ESXi , Workstation, Fusion and VMware Cloud Foundation (medium 6.7) - [CVE-2021-22040](https://insights.sbomify.com/CVE-2021-22040/): Use after free in VMware ESXi , Workstation, Fusion and VMware Cloud Foundation (medium 6.7) - [CVE-2021-2204](https://insights.sbomify.com/CVE-2021-2204/): Information disclosure in WebLogic Server (medium 5.3) - [CVE-2021-22038](https://insights.sbomify.com/CVE-2021-22038/): Privilege escalation in VMware InstallBuilder (high 8.8) - [CVE-2021-22037](https://insights.sbomify.com/CVE-2021-22037/): Other in VMware InstallBuilder (high 7.8) - [CVE-2021-22036](https://insights.sbomify.com/CVE-2021-22036/): Open redirect in VMware vRealize Orchestrator (medium 6.5) - [CVE-2021-22035](https://insights.sbomify.com/CVE-2021-22035/): Code injection in VMware vRealize Log Insight (medium 4.3) - [CVE-2021-22034](https://insights.sbomify.com/CVE-2021-22034/): Information disclosure in VMware vRealize Operations Tenant App for VMware Cloud Director (high 7.5) - [CVE-2021-22033](https://insights.sbomify.com/CVE-2021-22033/): Server-side request forgery in VMware vRealize Operations (low 2.7) - [CVE-2021-22030](https://insights.sbomify.com/CVE-2021-22030/): Information disclosure in GPDB (Greenplum database) (medium 6.5) - [CVE-2021-2203](https://insights.sbomify.com/CVE-2021-2203/): Denial of service in MySQL Server (medium 4.9) - [CVE-2021-22029](https://insights.sbomify.com/CVE-2021-22029/): Denial of service in VMware Workspace ONE UEM console (high 7.5) - [CVE-2021-22028](https://insights.sbomify.com/CVE-2021-22028/): Path traversal in gpfdist (Greenplum) (critical 9.1) - [CVE-2021-22027](https://insights.sbomify.com/CVE-2021-22027/): Server-side request forgery in VMware vRealize Operations (high 7.5) - [CVE-2021-22026](https://insights.sbomify.com/CVE-2021-22026/): Server-side request forgery in VMware vRealize Operations (high 7.5) - [CVE-2021-22025](https://insights.sbomify.com/CVE-2021-22025/): Missing authorization in VMware vRealize Operations (high 7.5) - [CVE-2021-22024](https://insights.sbomify.com/CVE-2021-22024/): Information disclosure in VMware vRealize Operations (high 7.5) - [CVE-2021-22023](https://insights.sbomify.com/CVE-2021-22023/): Missing authorization in VMware vRealize Operations (high 7.2) - [CVE-2021-22022](https://insights.sbomify.com/CVE-2021-22022/): Path traversal in VMware vRealize Operations (medium 4.9) - [CVE-2021-22021](https://insights.sbomify.com/CVE-2021-22021/): Cross-site scripting in VMware vRealize Log Insight (medium 5.4) - [CVE-2021-22020](https://insights.sbomify.com/CVE-2021-22020/): Denial of service in VMware vCenter Server, VMware Cloud Foundation (medium 5.5) - [CVE-2021-2202](https://insights.sbomify.com/CVE-2021-2202/): Denial of service in MySQL Server (medium 6.5) - [CVE-2021-22019](https://insights.sbomify.com/CVE-2021-22019/): Denial of service in VMware vCenter Server, VMware Cloud Foundation (high 7.5) - [CVE-2021-22018](https://insights.sbomify.com/CVE-2021-22018/): Path traversal in VMware vCenter Server, VMware Cloud Foundation (medium 6.5) - [CVE-2021-22017](https://insights.sbomify.com/CVE-2021-22017/): VMware vCenter Server Improper Access Control (medium 5.3, exploited in the wild) - [CVE-2021-22016](https://insights.sbomify.com/CVE-2021-22016/): Cross-site scripting in VMware vCenter Server, VMware Cloud Foundation (medium 6.1) - [CVE-2021-22015](https://insights.sbomify.com/CVE-2021-22015/): Privilege escalation in VMware vCenter Server, VMware Cloud Foundation (high 7.8) - [CVE-2021-22014](https://insights.sbomify.com/CVE-2021-22014/): Code injection in VMware vCenter Server, VMware Cloud Foundation (high 7.2) - [CVE-2021-22013](https://insights.sbomify.com/CVE-2021-22013/): Path traversal in VMware vCenter Server (high 7.5) - [CVE-2021-22012](https://insights.sbomify.com/CVE-2021-22012/): Missing authorization in VMware vCenter Server (high 7.5) - [CVE-2021-22011](https://insights.sbomify.com/CVE-2021-22011/): Missing authorization in VMware vCenter Server, VMware Cloud Foundation (medium 5.3) - [CVE-2021-22010](https://insights.sbomify.com/CVE-2021-22010/): Denial of service in VMware vCenter Server, VMware Cloud Foundation (high 7.5) - [CVE-2021-2201](https://insights.sbomify.com/CVE-2021-2201/): Denial of service in MySQL Server (medium 4.9) - [CVE-2021-22009](https://insights.sbomify.com/CVE-2021-22009/): Denial of service in VMware vCenter Server, VMware Cloud Foundation (high 7.5) - [CVE-2021-22008](https://insights.sbomify.com/CVE-2021-22008/): Information disclosure in VMware vCenter Server, VMware Cloud Foundation (high 7.5) - [CVE-2021-22007](https://insights.sbomify.com/CVE-2021-22007/): Information disclosure in VMware vCenter Server, VMware Cloud Foundation (medium 5.5) - [CVE-2021-22006](https://insights.sbomify.com/CVE-2021-22006/): Server-side request forgery in VMware vCenter Server, VMware Cloud Foundation (high 7.5) - [CVE-2021-22005](https://insights.sbomify.com/CVE-2021-22005/): VMware vCenter Server File Upload (critical 9.8, exploited in the wild) - [CVE-2021-22004](https://insights.sbomify.com/CVE-2021-22004/): Improper Authentication in SaltStack Salt (medium 6.4) - [CVE-2021-22003](https://insights.sbomify.com/CVE-2021-22003/): Auth bypass in VMware Workspace ONE Access and Identity Manager (high 7.5) - [CVE-2021-22002](https://insights.sbomify.com/CVE-2021-22002/): Auth bypass in VMware Workspace ONE Access, Identity Manager and vRealize Automation (critical 9.8) - [CVE-2021-22001](https://insights.sbomify.com/CVE-2021-22001/): Information disclosure in Cloud Foundry UAA server (high 7.5) - [CVE-2021-22000](https://insights.sbomify.com/CVE-2021-22000/): Privilege escalation in Vmware Thinapp (high 7.8) - [CVE-2021-2200](https://insights.sbomify.com/CVE-2021-2200/): Other in Applications Framework (critical 9.1) - [CVE-2021-21999](https://insights.sbomify.com/CVE-2021-21999/): Privilege escalation in VMware Tools for Windows, VMware Remote Console for Windows and VMware App Volumes (high 7.8) - [CVE-2021-21998](https://insights.sbomify.com/CVE-2021-21998/): Auth bypass in VMware Carbon Black App Control (AppC) (critical 9.8) - [CVE-2021-21997](https://insights.sbomify.com/CVE-2021-21997/): Denial of service in VMware Tools for Windows (medium 5.5) - [CVE-2021-21996](https://insights.sbomify.com/CVE-2021-21996/): Exposure of Resource to Wrong Sphere in salt (high 7.5) - [CVE-2021-21995](https://insights.sbomify.com/CVE-2021-21995/): Memory corruption in VMware ESXi and VMware Cloud Foundation (high 7.5) - [CVE-2021-21994](https://insights.sbomify.com/CVE-2021-21994/): Auth bypass in VMware ESXi and VMware Cloud Foundation (critical 9.8) - [CVE-2021-21993](https://insights.sbomify.com/CVE-2021-21993/): Server-side request forgery in VMware vCenter Server, VMware Cloud Foundation (medium 6.5) - [CVE-2021-21992](https://insights.sbomify.com/CVE-2021-21992/): XML external entity in VMware vCenter Server, VMware Cloud Foundation (medium 6.5) - [CVE-2021-21991](https://insights.sbomify.com/CVE-2021-21991/): Privilege escalation in VMware vCenter Server, VMware Cloud Foundation (high 7.8) - [CVE-2021-21990](https://insights.sbomify.com/CVE-2021-21990/): Cross-site scripting in Vmware Workspace One UEM console (medium 6.1) - [CVE-2021-2199](https://insights.sbomify.com/CVE-2021-2199/): Other in iStore (high 8.2) - [CVE-2021-21989](https://insights.sbomify.com/CVE-2021-21989/): Memory corruption in VMware Workstation Pro / Player (Workstation), VMware Horizon Client for Windows (medium 6.5) - [CVE-2021-21988](https://insights.sbomify.com/CVE-2021-21988/): Memory corruption in VMware Workstation Pro / Player (Workstation), VMware Horizon Client for Windows (medium 6.5) - [CVE-2021-21987](https://insights.sbomify.com/CVE-2021-21987/): Memory corruption in VMware Workstation Pro / Player (Workstation), VMware Horizon Client for Windows (medium 6.5) - [CVE-2021-21986](https://insights.sbomify.com/CVE-2021-21986/): Auth bypass in VMware vCenter Server and VMware Cloud Foundation (critical 9.8) - [CVE-2021-21985](https://insights.sbomify.com/CVE-2021-21985/): VMware vCenter Server Improper Input Validation (critical 9.8, exploited in the wild) - [CVE-2021-21984](https://insights.sbomify.com/CVE-2021-21984/): Missing authorization in VMware vRealize Business for Cloud (critical 9.8) - [CVE-2021-21983](https://insights.sbomify.com/CVE-2021-21983/): Path traversal in VMware vRealize Operations (medium 6.5) - [CVE-2021-21982](https://insights.sbomify.com/CVE-2021-21982/): Auth bypass in VMware Carbon Black Cloud Workload appliance (critical 9.1) - [CVE-2021-21981](https://insights.sbomify.com/CVE-2021-21981/): Privilege escalation in VMware NSX-T (high 7.8) - [CVE-2021-21980](https://insights.sbomify.com/CVE-2021-21980/): Information disclosure in VMware vCenter Server and VMware Cloud Foundation (high 7.5) - [CVE-2021-2198](https://insights.sbomify.com/CVE-2021-2198/): Other in Knowledge Management (high 8.2) - [CVE-2021-21979](https://insights.sbomify.com/CVE-2021-21979/): Hardcoded credentials in Bitnami Containers (high 7.3) - [CVE-2021-21978](https://insights.sbomify.com/CVE-2021-21978/): File upload in VMware View Planner (critical 9.8) - [CVE-2021-21976](https://insights.sbomify.com/CVE-2021-21976/): Command injection in vSphere Replication (high 7.2) - [CVE-2021-21975](https://insights.sbomify.com/CVE-2021-21975/): VMware Server Side Request Forgery in vRealize Operations Manager API (critical 9.8, exploited in the wild) - [CVE-2021-21974](https://insights.sbomify.com/CVE-2021-21974/): Memory corruption in VMware Cloud Foundation (high 8.8) - [CVE-2021-21973](https://insights.sbomify.com/CVE-2021-21973/): VMware vCenter Server and Cloud Foundation Server Side Request Forgery (SSRF) (medium 5.3, exploited in the wild) - [CVE-2021-21972](https://insights.sbomify.com/CVE-2021-21972/): VMware vCenter Server Remote Code Execution (critical 9.8, exploited in the wild) - [CVE-2021-21971](https://insights.sbomify.com/CVE-2021-21971/): Memory corruption in Sealevel (low 3.7) - [CVE-2021-21970](https://insights.sbomify.com/CVE-2021-21970/): Memory corruption in Sealevel (low 3.7) - [CVE-2021-2197](https://insights.sbomify.com/CVE-2021-2197/): Other in iStore (high 8.2) - [CVE-2021-21969](https://insights.sbomify.com/CVE-2021-21969/): Memory corruption in Sealevel" (low 3.7) - [CVE-2021-21968](https://insights.sbomify.com/CVE-2021-21968/): Path traversal in Sealevel (high 8.1) - [CVE-2021-21967](https://insights.sbomify.com/CVE-2021-21967/): Memory corruption in SeaConnect 370W (medium 6.5) - [CVE-2021-21966](https://insights.sbomify.com/CVE-2021-21966/): Information disclosure in Texas Instruments (medium 5.3) - [CVE-2021-21965](https://insights.sbomify.com/CVE-2021-21965/): Denial of service in Sealevel (high 8.6) --- From sbomify Insights: https://insights.sbomify.com/years/2021/page/232/