CVE-2022-31698

Published Dec 13, 2022 CVSS 3.1 · 5.3 Medium EPSS 47.8% KEV · Not listed
Description
The vCenter Server contains a denial-of-service vulnerability in the content library service. A malicious actor with network access to port 443 on vCenter Server may exploit this issue to trigger a denial-of-service condition by sending a specially crafted header.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2022-53118 The vCenter Server contains a denial-of-service vulnerability in the content library service. A malicious actor with network access to port 443 on vCenter Server may exploit this issue to trigger a denial-of-service condition by sending a specially crafted header.
History
Type Values Removed Values Added
CPEs cpe:2.3:o:vmware:cloud_foundation:3.10.2:*:*:*:*:*:*:*
cpe:2.3:o:vmware:cloud_foundation:4.1.0.1:*:*:*:*:*:*:*
cpe:2.3:a:vmware:cloud_foundation:3.10.2:*:*:*:*:*:*:*
Type Values Removed Values Added
Weaknesses CWE-400
Metrics cvssV3_1

{'score': 5.3, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'}

ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

cvssV3_1

{'score': 5.3, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N'}

Weaknesses

Sources

Status
PUBLISHED
Assigner
vmware
Published
Updated
Apr 22, 2025, 3:26 AM
Reserved
May 25, 2022, 12:00 AM
Status
Modified
Published
Dec 13, 2022, 4:15 PM
Modified
Jun 17, 2026, 4:46 AM