VMware vulnerabilities
Filtered catalog for this technology stack. Use KEV and EPSS sorting to prioritize — then open each CVE for remediation and version matching.
171 matching records
- Critical9.8VMware vCenter Server Out-of-Bounds Write VulnerabilityPatch nowKEVEPSS 99.23%Oct 25, 2023
- UnknownVMware workstation Uncontrolled Search Path ElementPatch nowKEVEPSS 8.46%Jun 22, 2023
- Low3.9VMware Tools Authentication Bypass VulnerabilityPatch nowKEVEPSS 13.64%Jun 13, 2023
- Critical9.8Vmware Aria Operations for Networks Command Injection VulnerabilityPatch nowKEVEPSS 98.28%Jun 7, 2023
- UnknownVMware cloud_foundation Improper Restriction of XML External Entity ReferencePatch nowKEVEPSS 9.35%Mar 8, 2023
- UnknownVMware cloud_foundation Out-of-bounds WritePatch nowKEVEPSS 45.06%Feb 3, 2023
- UnknownVMware vRealize Operations Authentication BypassPatch nowKEVEPSS 0.86%Aug 10, 2022
- UnknownVMware Spring Framework Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 13.23%May 31, 2022
- UnknownvSphere Web Client (FLEX/Flash) Unauthorized Arbitrary File Read VulnerabilityPatch nowKEVEPSS 4.67%May 31, 2022
- High7.2VMware cloud_foundation Deserialization of Untrusted DataPatch nowKEVEPSS 23.31%Apr 13, 2022
- Critical9.8VMware Workspace ONE Access and Identity Manager Improper AuthenticationPatch nowKEVEPSS 49.53%Apr 13, 2022
- High7.8VMware Multiple Products Privilege Escalation VulnerabilityPatch nowKEVEPSS 35.52%Apr 6, 2022
- Critical9.8VMware Workspace ONE Access and Identity Manager Server-Side Template Injection VulnerabilityPatch nowKEVEPSS 100.00%Apr 6, 2022
- Critical9.8Spring Framework JDK 9+ Remote Code Execution VulnerabilityPatch nowKEVEPSS 99.64%Apr 1, 2022
- Critical9.8VMware Tanzu Spring Cloud Function Remote Code Execution VulnerabilityPatch nowKEVEPSS 99.94%Apr 1, 2022
- Medium6.5VMware vCenter Server Incorrect Default File Permissions VulnerabilityPatch nowKEVEPSS 13.28%Mar 29, 2022
- Critical10.0VMware Spring Cloud Gateway Code Injection VulnerabilityPatch nowKEVEPSS 98.25%Mar 3, 2022
- UnknownvRealize Operations Manager API prior to 8.4 Unauthenticated File WritePatch nowKEVEPSS 68.77%Oct 7, 2021
- Medium5.3VMware vCenter Server Improper Access ControlPatch nowKEVEPSS 49.18%Sep 23, 2021
- Critical9.8VMware vCenter Server File Upload VulnerabilityPatch nowKEVEPSS 100.00%Sep 23, 2021
- UnknownVMware Workspace ONE Access, Identity Manager and vRealize Authentication Bypass VulnerabilityPatch nowKEVEPSS 56.31%Aug 12, 2021
- Critical9.8VMware vCenter Server Improper Input Validation VulnerabilityPatch nowKEVEPSS 100.00%May 26, 2021
- High7.5VMware Server Side Request Forgery in vRealize Operations Manager APIPatch nowKEVEPSS 78.00%Mar 31, 2021
- Medium5.3VMware vCenter Server and Cloud Foundation Server Side Request Forgery (SSRF) VulnerabilityPatch nowKEVEPSS 88.01%Feb 24, 2021
- Critical9.8VMware vCenter Server Remote Code Execution VulnerabilityPatch nowKEVEPSS 99.87%Feb 24, 2021