CVE-2022-31698: VMware Cloud Foundation

Medium severity, CVSS 5.3. EPSS: 47.8% chance of exploitation in the next 30 days.

The vCenter Server contains a denial-of-service vulnerability in the content library service. A malicious actor with network access to port 443 on vCenter Server may exploit this issue to trigger a denial-of-service condition by sending a specially crafted header.

Affected products

• VMware Cloud Foundation: version 3.0 only; version 3.0.1 only; version 3.0.1.1 only; version 3.5 only; version 3.5.1 only; version 3.7 only; …
• VMware vCenter Server: version 6.5 only; version 6.7 only; version 7.0 only

Published 2022-12-13. Last modified 2026-06-17.