VMware vulnerabilities
Filtered catalog for this technology stack. Use KEV and EPSS sorting to prioritize — then open each CVE for remediation and version matching.
171 matching records
- High8.6Spring AI's spring-ai-bedrock-converse contains a Server-Side Request Forgery (SSRF) vulnerability in BedrockProxyChatModel when processing multimodal messages that in…Check if you run itEPSS 0.36%Mar 27, 2026
- Critical9.8In Spring AI, a SpEL injection vulnerability exists in SimpleVectorStore when a user-supplied value is used as a filter expression key.Check if you run itEPSS 1.11%Mar 27, 2026
- High8.6Vulnerability in Spring Cloud when substituting the profile parameter from a request made to the Spring Cloud Config Server configured to the native file system as a b…Check if you run itEPSS 1.22%Mar 24, 2026
- Medium5.9Use of Java scripting engine enabled (e.g.Check if you run itEPSS 0.40%Mar 20, 2026
- Low2.6Spring MVC and WebFlux applications are vulnerable to stream corruption when using Server-Sent Events (SSE).Check if you run itEPSS 0.12%Mar 20, 2026
- High8.1Spring Boot applications with Actuator can be vulnerable to an "Authentication Bypass" vulnerability when an application endpoint that requires authentication is decla…Check if you run itEPSS 0.37%Mar 20, 2026
- Critical9.1When applications specify HTTP response headers for servlet applications using Spring Security, there is the possibility that the HTTP Headers will not be written.Check if you run itEPSS 0.49%Mar 19, 2026
- High8.1Spring Boot applications with Actuator can be vulnerable to an "Authentication Bypass" vulnerability when an application endpoint that requires authentication is decla…Check if you run itEPSS 0.34%Mar 19, 2026
- High8.8A critical SQL injection vulnerability in Spring AI's MariaDBFilterExpressionConverter allows attackers to bypass metadata-based access controls and execute arbitrary SQL commands.Check if you run itEPSS 0.53%Mar 18, 2026
- High8.6A JSONPath injection vulnerability in Spring AI's AbstractFilterExpressionConverter allows authenticated users to bypass metadata-based access controls through crafted…Check if you run itEPSS 0.54%Mar 18, 2026
- Medium5.9VMWare Workstation and Fusion contain a logic flaw in the management of network packets.Check if you run itEPSS 0.22%Feb 26, 2026
- High7.2VMware Aria Operations contains a privilege escalation vulnerability.Check if you run itEPSS 0.74%Feb 25, 2026
- Critical9.0VMware Aria Operations contains a stored cross-site scripting vulnerability.Check if you run itEPSS 0.45%Feb 25, 2026
- High8.1Broadcom VMware Aria Operations Command Injection VulnerabilityPatch nowKEVEPSS 18.32%Feb 25, 2026
- Medium4.3STOMP over WebSocket applications may be vulnerable to a security bypass that allows an attacker to send unauthorized messages.Check if you run itEPSS 0.31%Oct 16, 2025
- High7.5The following versions of Spring Cloud Gateway Server Webflux may be vulnerable to the ability to expose environment variables and system properties to attackers.Check if you run itEPSS 0.48%Oct 16, 2025
- High7.8Broadcom VMware Aria Operations and VMware Tools Privilege Defined with Unsafe Actions VulnerabilityPatch nowKEVEPSS 8.63%Sep 29, 2025
- High7.5The Spring Framework annotation detection mechanism may not correctly resolve annotations on methods within type hierarchies with a parameterized super type with unbounded genericsCheck if you run itEPSS 0.48%Sep 16, 2025
- High7.5The Spring Security annotation detection mechanism may not correctly resolve annotations on methods within type hierarchies with a parameterized super type with unbounded generics.Check if you run itEPSS 0.45%Sep 16, 2025
- Medium6.6Race condition in the Zoom Workplace VDI Plugin macOS Universal installer for VMware Horizon before version 6.4.10 (or before 6.2.15 and 6.3.12 in their respective tracks) may alloCheck if you run itEPSS 0.11%Sep 9, 2025
- Medium6.9Improper Certificate Validation in Checkmk Exchange plugin VMware vSAN allows attackers in MitM position to intercept traffic.Check if you run itEPSS 0.11%Aug 28, 2025
- Medium5.9Spring Framework MVC applications can be vulnerable to a “Path Traversal Vulnerability” when deployed on a non-compliant Servlet container.Check if you run itEPSS 2.13%Aug 18, 2025
- Medium4.4VMware vCenter contains a denial-of-service vulnerability.Check if you run itEPSS 0.34%Jul 29, 2025
- High8.7A potential security vulnerability has been identified in HPE OneView for VMware vCenter (OV4VC).Check if you run itEPSS 0.30%Jun 26, 2025
- UnknownVmware vSphere Web Client (FLEX/Flash) Unauthorized Arbitrary File Read VulnerabilityPatch nowKEVJun 7, 2025