VMware vulnerabilities
Filtered catalog for this technology stack. Use KEV and EPSS sorting to prioritize — then open each CVE for remediation and version matching.
171 matching records
- Medium6.5A WebFlux server application that processes multipart requests creates temp files for parts larger than 10 K.Check if you run itEPSS 0.34%Apr 29, 2026
- Medium5.3The raw message of every server-side AuthenticationException is returned to the unauthenticated remote caller in the gRPC status description.Check if you run itEPSS 0.20%Apr 28, 2026
- High8.8When an authenticated user is denied access to a gRPC method, their authenticated identity remains bound to the gRPC worker thread and can be inherited by a subsequent…Check if you run itEPSS 0.17%Apr 28, 2026
- Medium6.5In Spring AI, a malicious PDF file can be crafted that triggers the allocation of unreasonable amounts of memory when handled by .Check if you run itEPSS 0.24%Apr 28, 2026
- Medium6.1In Spring AI, having access to a shared environment can expose the ONNX model used by the application.Check if you run itEPSS 0.10%Apr 28, 2026
- High8.8SQL injection vulnerability in Spring AI's allows attackers to execute arbitrary SQL queries via crafted document IDs.Check if you run itEPSS 0.34%Apr 28, 2026
- Medium5.9In Spring AI, an attacker can bypass conversation isolation and exfiltrate sensitive memory from other users’ chat histories, including secrets and credentials, by inj…Check if you run itEPSS 0.23%Apr 28, 2026
- High8.6In Spring AI, various FilterExpressionConverter implementations accept a filter expression object and translate them to specific vector store query languages.Check if you run itEPSS 0.39%Apr 28, 2026
- Medium6.7When an application is configured to use , a local attacker with write access to the PID file's location can corrupt one file on the host each time the application is…Check if you run itEPSS 0.11%Apr 28, 2026
- Critical9.1In certain circumstances, Spring Boot's default web security is ineffective allowing unauthorized access to all endpoints.Check if you run itEPSS 0.49%Apr 28, 2026
- High7.5Values produced by ${random.value} are not suitable for use as secrets.Check if you run itEPSS 0.31%Apr 28, 2026
- Critical9.8Spring Boot's Cassandra auto-configuration does not perform hostname verification when establishing an SSL connection to Cassandra.Check if you run itEPSS 0.18%Apr 28, 2026
- High7.0A local attacker on the same host as the application may be able to take control of the directory used by .Check if you run itEPSS 0.14%Apr 28, 2026
- High7.5An attacker on the same network as the remote application may be able to utilize a timing attack to discover information about the remote secret.Check if you run itEPSS 0.26%Apr 28, 2026
- Critical9.1When configured to use an SSL bundle, Spring Boot's RabbitMQ auto-configuration does not perform hostname verification when connecting to the RabbitMQ broker.Check if you run itEPSS 0.16%Apr 27, 2026
- Medium6.8When configured to use an SSL bundle, Spring Boot's Elasticsearch auto-configuration does not perform hostname verification when connecting to the Elasticsearch server.Check if you run itEPSS 0.14%Apr 27, 2026
- High7.5Vulnerability in Spring Spring Security.Check if you run itEPSS 0.27%Apr 22, 2026
- High7.5Vulnerability in Spring Spring Security.Check if you run itEPSS 0.25%Apr 22, 2026
- Medium6.5Vulnerability in Spring Spring Security.Check if you run itEPSS 0.20%Apr 22, 2026
- High8.1Vulnerability in Spring Spring Security.Check if you run itEPSS 0.24%Apr 22, 2026
- Low3.7Vulnerability in Spring Spring Security.Check if you run itEPSS 0.21%Apr 22, 2026
- Medium4.8Vulnerability in Spring Spring Security.Check if you run itEPSS 0.12%Apr 21, 2026
- High7.5When configuring SSL bundles in Spring Cloud Gateway by using the configuration property spring.ssl.bundle, the configuration was silently ignored and the default SSL…Check if you run itEPSS 0.22%Apr 10, 2026
- High7.5In RedisFilterExpressionConverter of spring-ai-redis-store, when a user-controlled string is passed as a filter value for a TAG field, stringValue() inserts the value…Check if you run itEPSS 0.26%Mar 27, 2026
- High7.5Spring AI's spring-ai-neo4j-store contains a Cypher injection vulnerability in Neo4jVectorFilterExpressionConverter.Check if you run itEPSS 0.26%Mar 27, 2026