VMware vulnerabilities
Filtered catalog for this technology stack. Use KEV and EPSS sorting to prioritize — then open each CVE for remediation and version matching.
171 matching records
- High8.6Spring Cloud Gateway Server forwards the X-Forwarded-For and Forwarded headers from untrusted proxies.Check if you run itEPSS 0.36%May 30, 2025
- Critical9.4The bitnami/pgpool Docker image, and the bitnami/postgres-ha k8s chart, under default configurations, comes with an 'repmgr' user that allows unauthenticated access to the databaseCheck if you run itEPSS 0.50%May 13, 2025
- High8.2VMware Aria automation contains a DOM based Cross-Site Scripting (XSS) vulnerability.Check if you run itEPSS 0.36%May 13, 2025
- Medium6.1VMware Tools contains an insecure file handling vulnerability.Check if you run itEPSS 0.27%May 12, 2025
- Medium6.0VMware ESXi, Workstation, and Fusion Information Disclosure VulnerabilityPatch nowKEVEPSS 1.63%Mar 4, 2025
- High8.2VMware ESXi Arbitrary Write VulnerabilityPatch nowKEVEPSS 1.02%Mar 4, 2025
- High8.2VMware ESXi and Workstation TOCTOU Race Condition VulnerabilityPatch nowKEVEPSS 1.56%Mar 4, 2025
- UnknownVMware ESXi Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 83.38%Feb 27, 2025
- UnknownVMware Spring Framework Unintended Proxy or Intermediary ('Confused Deputy')Patch nowKEVEPSS 10.21%Feb 25, 2025
- UnknownSpring Framework WebMvc.fn or WebFlux.fn Path Traversal VulnerabilityPatch nowKEVEPSS 21.26%Oct 22, 2024
- UnknownVMware ESXi, Workstation, and Fusion UHCI USB Controller VulnerabilityPatch nowKEVEPSS 2.31%Oct 11, 2024
- UnknownVMware ESXi Out-of-bounds Write VulnerabilityPatch nowKEVEPSS 0.50%Oct 11, 2024
- Critical9.8VMware vCenter Server Privilege Escalation VulnerabilityPatch nowKEVEPSS 17.36%Sep 17, 2024
- Critical9.8VMware vCenter Server Heap-Based Buffer Overflow VulnerabilityPatch nowKEVEPSS 54.57%Sep 17, 2024
- UnknownVMware ESXi, Workstation, and Fusion UHCI USB Controller VulnerabilityPatch nowKEVEPSS 0.65%Sep 11, 2024
- UnknownVMware ESXi, Workstation, and Fusion XHCI USB Controller VulnerabilityPatch nowKEVEPSS 3.54%Sep 11, 2024
- UnknownVMware vrealize_operations_for_horizon Incorrect AuthorizationPatch nowKEVEPSS 0.50%Jul 25, 2024
- Critical9.8Broadcom VMware vCenter Server Out-of-bounds Write VulnerabilityPatch nowKEVEPSS 22.38%Jun 17, 2024
- High7.2VMware ESXi Authentication Bypass VulnerabilityPatch nowKEVEPSS 26.77%Apr 23, 2024
- UnknownVMware vRealize Log Insight Information DisclosurePatch nowKEVEPSS 22.30%Dec 20, 2023
- UnknownVMware vrealize_log_insight Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 87.08%Dec 20, 2023
- UnknownVMware vRealize Remote Code ExecutionPatch nowKEVEPSS 81.01%Dec 20, 2023
- UnknownVMware view_planner Improper Input ValidationPatch nowKEVEPSS 99.00%Dec 3, 2023
- UnknownVMware cloud_director Missing Authentication for Critical FunctionPatch nowKEVEPSS 1.34%Nov 14, 2023
- UnknownVMware Workspace ONE Access, Identity Manager and vRealize Automation Authentication BypassPatch nowKEVEPSS 24.68%Nov 13, 2023