CVE-2021-21984: VMware vRealize Business For Cloud

Critical severity, CVSS 9.8. EPSS: 2% chance of exploitation in the next 30 days.

VMware vRealize Business for Cloud 7.x prior to 7.6.0 contains a remote code execution vulnerability due to an unauthorised end point. A malicious actor with network access may exploit this issue causing unauthorised remote code execution on vRealize Business for Cloud Virtual Appliance.

Affected products

• VMware vRealize Business For Cloud: from 7.0, before 7.6.0 (fixed in 7.6.0)

Published 2021-05-07. Last modified 2026-06-17.