Live › vulnerability › CVE-2021-22017
Go to dashboardVMware vCenter Server's rhttproxy component mishandles URI normalization, which lets a remote request reach endpoints it should not. CISA lists it as actively exploited, so attackers can reach vCenter management functions without the access they should need.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 19:11 UTC, 3h before NVD. All times on this page are UTC.
Apply updates per vendor instructions.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| VMware vCenter Server | vendor | – | – |
Check the installed vCenter version in the VAMI web interface or with vpxd -v on the appliance and compare it to the patched release in the VMware advisory.
Apply the VMware vCenter update that addresses CVE-2021-22017, per vendor instructions as CISA requires.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Rhttproxy as used in vCenter Server contains a vulnerability due to improper implementation of URI normalization. A malicious actor with network access to port 443 on vCenter Server may exploit this issue to bypass proxy leading to internal endpoints being accessed.
This page as .md · .json · in your agent: get_signal("CVE-2021-22017")
CISA KEV catalog, Creative Commons 0 · EPSS scores by FIRST, used with attribution · NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.