Skip to contentVmware Cloud Foundation vulnerabilities
- vmware vcenter server, cloud foundation +1 moreThe vCenter Server contains a denial-of-service vulnerability due to improper XML entity parsing....CVE-2021-219926.5 Medium
- vmware vcenter server, cloud foundation +1 moreThe vCenter Server contains a local privilege escalation vulnerability due to the way it handles...CVE-2021-219917.8 High
- vmware identity manager, workspace one access, cloud foundation +1 more +3 moreVMware Workspace ONE Access and Identity Manager, unintentionally provide a login interface on...CVE-2021-220037.5 High
- vmware identity manager, workspace one access, cloud foundation +1 more +3 moreVMware Workspace ONE Access and Identity Manager, allow the /cfg web app and diagnostic endpoints...CVE-2021-220029.8 Critical
- vmware vrealize log insight, cloud foundation +1 moreVMware vRealize Log Insight (8.x prior to 8.4) contains a Cross Site Scripting (XSS)...CVE-2021-220215.4 Medium
- vmware vrealize operations manager, cloud foundation, vrealize suite lifecycle manager +2 moreThe vRealize Operations Manager API (8.x prior to 8.5) contains a broken access control...CVE-2021-220257.5 High
- vmware vrealize operations manager, cloud foundation, vrealize suite lifecycle manager +2 moreThe vRealize Operations Manager API (8.x prior to 8.5) contains a Server Side Request Forgery in...CVE-2021-220277.5 High
- vmware vrealize operations manager, cloud foundation, vrealize suite lifecycle manager +2 moreThe vRealize Operations Manager API (8.x prior to 8.5) contains a Server Side Request Forgery in...CVE-2021-220267.5 High
- vmware vrealize operations manager, cloud foundation, vrealize suite lifecycle manager +2 moreThe vRealize Operations Manager API (8.x prior to 8.5) contains an arbitrary log-file read...CVE-2021-220247.5 High
- vmware vrealize operations manager, cloud foundation, vrealize suite lifecycle manager +2 moreThe vRealize Operations Manager API (8.x prior to 8.5) has insecure object reference...CVE-2021-220237.2 High
- vmware vrealize operations manager, cloud foundation, vrealize suite lifecycle manager +2 moreThe vRealize Operations Manager API (8.x prior to 8.5) contains an arbitrary file read...CVE-2021-220224.9 Medium
- vmware esxi, cloud foundation +1 moreOpenSLP as used in ESXi has a denial-of-service vulnerability due a heap out-of-bounds read issue...CVE-2021-219957.5 High
- vmware esxi, cloud foundation +1 moreSFCB (Small Footprint CIM Broker) as used in ESXi has an authentication bypass vulnerability. A...CVE-2021-21994Public exploit9.8 Critical
- vmware vcenter server, cloud foundation +1 moreThe vSphere Client (HTML5) contains a vulnerability in a vSphere authentication mechanism for the...CVE-2021-21986EPSS 13.3%9.8 Critical
- vmware vcenter server, cloud foundation +1 moreThe vSphere Client (HTML5) contains a remote code execution vulnerability due to lack of input...CVE-2021-21985In KEVPublic exploitEPSS 100.0%9.8 Critical
- vmware vrealize operations manager api, vrealize operations manager, cloud foundation +1 more +3 moreServer Side Request Forgery in vRealize Operations Manager API (CVE-2021-21975) prior to 8.4 may...CVE-2021-21975In KEVPublic exploitEPSS 78.0%7.5 High
- vmware vrealize operations manager, cloud foundation, vrealize suite lifecycle manager +2 moreArbitrary file write vulnerability in vRealize Operations Manager API (CVE-2021-21983) prior to 8...CVE-2021-21983Public exploitEPSS 68.8%6.5 Medium
- vmware esxi, cloud foundation +1 moreOpenSLP as used in ESXi (7.0 before ESXi70U1c-17325551, 6.7 before ESXi670-202102401-SG, 6.5...CVE-2021-21974Public exploitEPSS 45.1%8.8 High
- vmware cloud foundation, vcenter server +1 moreThe vSphere Client (HTML5) contains a remote code execution vulnerability in a vCenter Server...CVE-2021-21972In KEVPublic exploitEPSS 99.9%9.8 Critical
- vmware cloud foundation, vcenter server, vcenter server and cloud foundation +2 moreThe vSphere Client (HTML5) contains an SSRF (Server Side Request Forgery) vulnerability due to...CVE-2021-21973In KEVPublic exploitEPSS 88.0%5.3 Medium
- vmware identity manager, identity manager connector, one access +3 more +5 moreVMware Workspace One Access, Access Connector, Identity Manager, and Identity Manager Connector...CVE-2020-4006In KEVEPSS 17.3%9.1 Critical
- vmware esxi, fusion, workstation +1 more +3 moreVMware ESXi (7.0 before ESXi70U1b-17168206, 6.7 before ESXi670-202011101-SG, 6.5 before ESXi650...CVE-2020-40048.2 High
- vmware esxi, cloud foundation +1 moreVMware ESXi (7.0 before ESXi70U1b-17168206, 6.7 before ESXi670-202011101-SG, 6.5 before ESXi650...CVE-2020-40057.8 High
- vmware esxi, fusion, workstation +2 more +4 moreIn VMware ESXi (6.7 before ESXi670-201908101-SG, 6.5 before ESXi650-202007101-SG), Workstation ...CVE-2020-39955.3 Medium
- vmware vcenter server, cloud foundation +1 moreVMware vCenter Server (6.7 before 6.7u3, 6.6 before 6.5u3k) contains a session hijack...CVE-2020-39947.4 High
- broadcom vmware nsx-t data center, vmware cloud foundation +1 moreVMware NSX-T (3.x before 3.0.2, 2.5.x before 2.5.2.2.0) contains a security vulnerability that...CVE-2020-39935.9 Medium
- vmware esxi, cloud foundation +1 moreOpenSLP as used in VMware ESXi (7.0 before ESXi_7.0.1-0.0.16850804, 6.7 before ESXi670-202010401...CVE-2020-3992In KEVPublic exploitEPSS 83.0%9.8 Critical
- vmware esxi, fusion, workstation +3 more +5 moreVMware ESXi (7.0 before ESXi_7.0.1-0.0.16850804, 6.7 before ESXi670-202008101-SG, 6.5 before...CVE-2020-39827.7 High
- vmware esxi, fusion, workstation +2 more +4 moreVMware ESXi (7.0 before ESXi_7.0.1-0.0.16850804, 6.7 before ESXi670-202008101-SG, 6.5 before...CVE-2020-39815.8 Medium
- vmware esxi, vcenter server, cloud foundation +2 moreVMware ESXi and vCenter Server contain a partial denial of service vulnerability in their...CVE-2020-39765.3 Medium
- vmware esxi, fusion, workstation +1 more +3 moreVMware ESXi (6.7 before ESXi670-201904101-SG and 6.5 before ESXi650-201907101-SG), Workstation ...CVE-2020-39715.5 Medium
- vmware esxi, fusion, workstation +1 more +3 moreVMware ESXi (7.0 before ESXi_7.0.0-1.20.16321839, 6.7 before ESXi670-202006401-SG and 6.5 before...CVE-2020-39655.5 Medium
- vmware esxi, fusion, workstation +1 more +3 moreVMware ESXi (7.0 before ESXi_7.0.0-1.20.16321839, 6.7 before ESXi670-202006401-SG and 6.5 before...CVE-2020-39644.7 Medium
- vmware esxi, fusion, workstation +1 more +3 moreVMware ESXi (7.0 before ESXi_7.0.0-1.20.16321839, 6.7 before ESXi670-202006401-SG and 6.5 before...CVE-2020-39635.5 Medium
- vmware esxi, fusion, workstation +1 more +3 moreVMware ESXi (7.0 before ESXi_7.0.0-1.20.16321839, 6.7 before ESXi670-202004101-SG and 6.5 before...CVE-2020-39667.5 High
- vmware esxi, fusion, workstation +1 more +3 moreVMware ESXi (7.0 before ESXi_7.0.0-1.20.16321839, 6.7 before ESXi670-202004101-SG and 6.5 before...CVE-2020-39688.2 High
- vmware esxi, fusion, workstation +1 more +3 moreVMware ESXi (7.0 before ESXi_7.0.0-1.20.16321839, 6.7 before ESXi670-202004101-SG and 6.5 before...CVE-2020-39677.5 High
- vmware esxi, fusion, workstation +1 more +3 moreVMware ESXi (7.0 before ESXi_7.0.0-1.20.16321839, 6.7 before ESXi670-202004101-SG and 6.5 before...CVE-2020-39703.8 Low
- vmware esxi, fusion, workstation +1 more +3 moreVMware ESXi (7.0 before ESXi_7.0.0-1.20.16321839, 6.7 before ESXi670-202004101-SG and 6.5 before...CVE-2020-39628.2 High
- vmware esxi, fusion, workstation +1 more +3 moreVMware ESXi (7.0 before ESXi_7.0.0-1.20.16321839, 6.7 before ESXi670-202004101-SG and 6.5 before...CVE-2020-39697.8 High
- linuxfoundation harbor, vmware cloud foundation, harbor container registry +2 moreHarbor API has a Broken Access Control vulnerability. The vulnerability allows project...CVE-2019-169197.5 High