VMware vulnerabilities
Filtered catalog for this technology stack. Use KEV and EPSS sorting to prioritize — then open each CVE for remediation and version matching.
171 matching records
- Critical9.1Multiple VMware Products Command Injection VulnerabilityPatch nowKEVEPSS 17.30%Nov 23, 2020
- Critical9.8VMware ESXi OpenSLP Use-After-Free VulnerabilityPatch nowKEVEPSS 83.02%Oct 20, 2020
- High7.5VMware Tanzu Spring Cloud Config Directory Traversal VulnerabilityPatch nowKEVEPSS 95.59%Jun 2, 2020
- Critical9.8VMware vCenter Server Information Disclosure VulnerabilityPatch nowKEVEPSS 90.38%Apr 10, 2020
- High7.8VMware Multiple Products Privilege Escalation VulnerabilityPatch nowKEVEPSS 7.25%Mar 17, 2020
- Critical9.8VMware ESXi and Horizon DaaS OpenSLP Heap-Based Buffer Overflow VulnerabilityPatch nowKEVEPSS 98.13%Dec 6, 2019
- UnknownVMware Spring Framework Improper Input ValidationPatch nowKEVEPSS 74.53%May 20, 2019
- UnknownVMware Horizon Connection Server Internal Domain Information DisclosurePatch nowKEVEPSS 1.23%Apr 9, 2019
- High8.1VMware SD-WAN Edge by VeloCloud Command Injection VulnerabilityPatch nowKEVEPSS 85.34%Jun 11, 2018
- Critical9.8VMware Tanzu Spring Data Commons Property Binder VulnerabilityPatch nowKEVEPSS 96.96%Apr 11, 2018
- Medium5.5VMware ESXi 6.5 without patch ESXi650-201703410-SG, 6.0 U3 without patch ESXi600-201703401-SG, 6.0 U2 without patch ESXi600-201703403-SG, 6.0 U1 without patch ESXi600-…Check if you run itEPSS 1.20%Jun 7, 2017
- High8.8The XHCI controller in VMware ESXi 6.5 without patch ESXi650-201703410-SG, 6.0 U3 without patch ESXi600-201703401-SG, 6.0 U2 without patch ESXi600-201703403-SG, 6.0 U1…Check if you run itEPSS 0.43%Jun 7, 2017
- High8.8VMware ESXi 6.5 without patch ESXi650-201703410-SG, 6.0 U3 without patch ESXi600-201703401-SG, 6.0 U2 without patch ESXi600-201703403-SG, 6.0 U1 without patch ESXi600-…Check if you run itEPSS 0.41%Jun 7, 2017
- High8.8VMware ESXi 6.5 without patch ESXi650-201703410-SG and 5.5 without patch ESXi550-201703401-SG; Workstation Pro / Player 12.x prior to 12.5.5; and Fusion Pro / Fusion 8…Check if you run itEPSS 0.52%Jun 7, 2017
- Medium5.4Cross-site scripting (XSS) vulnerability in the Host Client in VMware vSphere Hypervisor (aka ESXi) 5.5 and 6.0 allows remote authenticated users to inject arbitrary w…Check if you run itEPSS 1.13%Dec 29, 2016
- Medium6.1CRLF injection vulnerability in VMware vCenter Server 6.0 before U2 and ESXi 6.0 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response spl…Check if you run itEPSS 1.91%Aug 8, 2016
- High7.8Untrusted search path vulnerability in the HGFS (aka Shared Folders) feature in VMware Tools 10.0.5 in VMware ESXi 5.0 through 6.0, VMware Workstation Pro 12.1.x befor…Check this weekEPSS 18.02%Aug 8, 2016
- Medium6.3The VMware Tools HGFS (aka Shared Folders) implementation in VMware Workstation 11.x before 11.1.2, VMware Player 7.x before 7.1.2, VMware Fusion 7.x before 7.1.2, and…Check if you run itEPSS 1.33%Jan 9, 2016
- Low3.3vmware-authd (aka the Authorization process) in VMware Workstation 10.x before 10.0.5, VMware Player 6.x before 6.0.5, and VMware ESXi 5.0 through 5.5 allows attackers…Check if you run itEPSS 0.83%Jan 29, 2015
- Medium6.4VMware Workstation 10.x before 10.0.5, VMware Player 6.x before 6.0.5, VMware Fusion 6.x before 6.0.5, and VMware ESXi 5.0 through 5.5 allow host OS users to gain host…Check if you run itEPSS 4.19%Jan 29, 2015
- Medium4.3Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.0.2.0 and 10.3.6.0 allows remote attackers to affect integrity via vec…Check if you run itEPSS 3.84%Jul 17, 2014
- Medium5.8VMware Tools in VMware Workstation 10.x before 10.0.2, VMware Player 6.x before 6.0.2, VMware Fusion 6.x before 6.0.3, and VMware ESXi 5.0 through 5.5, when a Windows…Check if you run itEPSS 1.15%May 31, 2014
- Low3.3VMware Workstation 9.x before 9.0.1, VMware Player 5.x before 5.0.1, VMware Fusion 5.x before 5.0.1, VMware ESXi 4.0 through 5.1, and VMware ESX 4.0 and 4.1 allow gues…Check if you run itEPSS 0.68%Jan 17, 2014
- Medium4.3VMware ESXi 4.0 through 5.1 and ESX 4.0 and 4.1 allow remote attackers to cause a denial of service (NULL pointer dereference) by intercepting and modifying Network Fi…Check if you run itEPSS 2.76%Jan 17, 2014
- Medium4.4VMware ESXi 4.0 through 5.5 and ESX 4.0 and 4.1 allow local users to read or modify arbitrary files by leveraging the Virtual Machine Power User or Resource Pool Admin…Check if you run itEPSS 0.35%Dec 23, 2013