Catalog

Findings

Filter by record type (vulnerability, fix, incident, intelligence, research), severity, source, stack, and weakness.

SearchRecord typeSeveritySourceStackWeaknessSort

Known exploited only

High8.2VMware Aria automation contains a DOM based Cross-Site Scripting (XSS) vulnerability.Vuln · CVE-2025-22249 · VMware · VMware Cloud Foundation · EUVD · VMwareEPSS 36.0%May 13, 2025
UnknownVMware cloud_foundation Improper Restriction of XML External Entity ReferenceVuln · CVE-2022-31678 · VMware · cloud_foundation · CVE.org · VulnCheck KEV · VMwareKEVMar 8, 2023
Medium5.3VMware vCenter Server and Cloud Foundation Server Side Request Forgery (SSRF) VulnerabilityVuln · CVE-2021-21973 · VMware · vCenter Server and Cloud Foundation · CISA KEV · CVE.org · FIRST EPSS · VMwareKEVEPSS 88.0%Feb 24, 2021
Critical9.8VMware vCenter Server Remote Code Execution VulnerabilityVuln · CVE-2021-21972 · VMware · vCenter Server · CISA KEV · CVE.org · FIRST EPSS · VMwareKEVEPSS 99.9%Feb 24, 2021