CVE

CVE-2021-21978

9.8

CVSS

Description

VMware View Planner 4.x prior to 4.6 Security Patch 1 contains a remote code execution vulnerability. Improper input validation and lack of authorization leading to arbitrary file upload in logupload web application. An unauthorized attacker with network access to View Planner Harness could upload and execute a specially crafted file leading to remote code execution within the logupload container.

Attack Vector

Privileges Req.

User Interaction

vmware view planner

Updated Sep 18, 2026View on NVD →

S4E scanner

criticalProduct Based Web Vulnerabilities~15 seconds

CVE-2021-21978 Scanner

Detects 'Remote Code Execution (RCE)' vulnerability in VMware View Planner affects v. 4.x prior to 4.6 Security Patch 1.

Used 2.3k times · 5.9k assets checked · url

Scanner page →Run scanner

Monitor this CVE on your assets

S4E maps published CVEs to scanners and forecasts the next disclosure window for your stack.

Create a free account →