CVE-2013-3080: VMware vCenter Server Appliance

High severity, CVSS 9.0. EPSS: 2.5% chance of exploitation in the next 30 days.

VMware vCenter Server Appliance (vCSA) 5.1 before Update 1 allows remote authenticated users to create or overwrite arbitrary files, and consequently execute arbitrary code or cause a denial of service, by leveraging Virtual Appliance Management Interface (VAMI) web-interface access.

Affected products

• VMware vCenter Server Appliance: version 5.1 only

Published 2013-05-01. Last modified 2026-06-16.