Recently, VMware disclosed that its vCenter Server is affected by an arbitrary file upload vulnerability — CVE-2021-22005 — in the Analytics service. A malicious cyber actor with network access to port 443 can exploit this vulnerability to execute code on vCenter Server.
https://www.securitymagazine.com/articles/96201-cisa-vmware-vcenter-server-vulnerability-under-active-exploit
