Skip to contentVmware Cloud Foundation vulnerabilities
- vmware cloud foundation, vrealize operations +1 moreVMware Aria Operations contains a Local privilege escalation vulnerability. A malicious actor...CVE-2023-208796.7 Medium
- vmware cloud foundation, vrealize operations +1 moreVMware Aria Operations contains a deserialization vulnerability. A malicious actor with...CVE-2023-208787.2 High
- vmware cloud foundation, vrealize operations +1 moreVMware Aria Operations contains a privilege escalation vulnerability. An authenticated malicious...CVE-2023-208778.8 High
- vmware aria operations for logs, cloud foundation +1 moreVMware Aria Operations for Logs contains a command injection vulnerability. A malicious actor...CVE-2023-208657.2 High
- vmware aria operations for logs, cloud foundation +1 moreVMware Aria Operations for Logs contains a deserialization vulnerability. An unauthenticated,...CVE-2023-20864EPSS 70.4%9.8 Critical
- vmware access, cloud foundation, identity manager connector +2 moreVMware Workspace ONE Access and Identity Manager contain a broken authentication vulnerability....CVE-2022-317015.3 Medium
- vmware access, identity manager, cloud foundation +2 moreVMware Workspace ONE Access and Identity Manager contain an authenticated remote code execution...CVE-2022-317007.2 High
- vmware esxi, cloud foundation +1 moreVMware ESXi contains a heap-overflow vulnerability. A malicious local actor with restricted...CVE-2022-316993.3 Low
- vmware vcenter server, cloud foundation +1 moreThe vCenter Server contains a denial-of-service vulnerability in the content library service. A...CVE-2022-31698EPSS 47.8%5.3 Medium
- vmware vcenter server, cloud foundation +1 moreThe vCenter Server contains an information disclosure vulnerability due to the logging of...CVE-2022-316975.5 Medium
- vmware esxi, cloud foundation +1 moreVMware ESXi contains a memory corruption vulnerability that exists in the way it handles a...CVE-2022-316968.8 High
- vmware cloud foundation, nsx data center +1 moreVMware Cloud Foundation (NSX-V) contains an XML External Entity (XXE) vulnerability. On VCF 3.x...CVE-2022-316789.1 Critical
- vmware esxi, cloud foundation +1 moreVMware ESXi contains a null-pointer deference vulnerability. A malicious actor with privileges...CVE-2022-316816.5 Medium
- vmware vcenter server, cloud foundation +1 moreThe vCenter Server contains a server-side request forgery (SSRF) vulnerability. A malicious actor...CVE-2022-229827.5 High
- vmware identity manager, vrealize automation, workspace one access +2 more +4 moreVMware Workspace ONE Access, Identity Manager and vRealize Automation contain an authentication...CVE-2022-22972Public exploitEPSS 56.3%9.8 Critical
- vmware identity manager, workspace one access, cloud foundation +1 more +3 moreVMware Workspace ONE Access and Identity Manager contain a privilege escalation vulnerability. A...CVE-2022-229737.8 High
- vmware identity manager, vrealize automation, workspace one access +2 more +4 moreVMware Workspace ONE Access, Identity Manager and vRealize Automation contain two remote code...CVE-2022-229587.2 High
- vmware identity manager, vrealize automation, workspace one access +2 more +4 moreVMware Workspace ONE Access, Identity Manager and vRealize Automation contain an information...CVE-2022-229615.3 Medium
- vmware identity manager, vrealize automation, workspace one access +2 more +4 moreVMware Workspace ONE Access, Identity Manager and vRealize Automation contain a cross site...CVE-2022-229594.3 Medium
- vmware identity manager, vrealize automation, workspace one access +3 more +5 moreVMware Workspace ONE Access, Identity Manager and vRealize Automation contain a privilege...CVE-2022-22960In KEVPublic exploitEPSS 35.5%7.8 High
- vmware identity manager, vrealize automation, workspace one access +2 more +4 moreVMware Workspace ONE Access, Identity Manager and vRealize Automation contain two remote code...CVE-2022-22957Public exploitEPSS 23.3%7.2 High
- vmware identity manager, workspace one access and identity manager, workspace one access +3 more +5 moreVMware Workspace ONE Access and Identity Manager contain a remote code execution vulnerability...CVE-2022-22954In KEVPublic exploitEPSS 100.0%9.8 Critical
- vmware vcenter server, cloud foundation +1 moreThe vCenter Server contains an information disclosure vulnerability due to improper permission of...CVE-2022-22948In KEVPublic exploitEPSS 13.3%6.5 Medium
- vmware cloud foundation, nsx data center +1 moreVMware NSX Edge contains a CLI shell injection vulnerability. A malicious actor with SSH access...CVE-2022-229457.8 High
- vmware esxi, cloud foundation +1 moreESXi contains a slow HTTP POST denial-of-service vulnerability in rhttpproxy. A malicious actor...CVE-2021-220507.5 High
- vmware esxi, cloud foundation +1 moreVMware ESXi contains an unauthorized access vulnerability due to VMX having access to settingsd...CVE-2021-220427.8 High
- vmware esxi, fusion, workstation +1 more +3 moreVMware ESXi, Workstation, and Fusion contain a double-fetch vulnerability in the UHCI USB...CVE-2021-220416.7 Medium
- vmware esxi, fusion, cloud foundation +2 more +4 moreVMware ESXi, Workstation, and Fusion contain a use-after-free vulnerability in the XHCI USB...CVE-2021-220406.7 Medium
- vmware cloud foundationVMware Cloud Foundation contains an information disclosure vulnerability due to logging of...CVE-2022-229394.9 Medium
- vmware esxi, fusion, workstation +1 more +3 moreVMware ESXi (7.0, 6.7 before ESXi670-202111101-SG and 6.5 before ESXi650-202110101-SG), VMware...CVE-2021-220457.8 High
- vmware vcenter server, cloud foundation +1 moreThe vSphere Web Client (FLEX/Flash) contains an unauthorized arbitrary file read vulnerability. A...CVE-2021-21980Public exploit7.5 High
- vmware vcenter server, cloud foundation +1 moreThe vCenter Server contains a privilege escalation vulnerability in the IWA (Integrated Windows...CVE-2021-22048EPSS 10.3%8.8 High
- vmware vrealize log insight, cloud foundation, vrealize suite lifecycle manager +2 moreVMware vRealize Log Insight (8.x prior to 8.6) contains a CSV(Comma Separated Value) injection...CVE-2021-220354.3 Medium
- vmware vrealize operations, cloud foundation, vrealize suite lifecycle manager +2 moreReleases prior to VMware vRealize Operations 8.6 contain a Server Side Request Forgery (SSRF)...CVE-2021-220332.7 Low
- vmware vcenter server, cloud foundation +1 moreThe vCenter Server contains a denial-of-service vulnerability in the Analytics service....CVE-2021-220205.5 Medium
- vmware vcenter server, cloud foundation +1 moreThe vCenter Server contains a denial-of-service vulnerability in VAPI (vCenter API) service. A...CVE-2021-220197.5 High
- vmware vcenter server, cloud foundation +1 moreThe vCenter Server contains an arbitrary file deletion vulnerability in a VMware vSphere Life...CVE-2021-220186.5 Medium
- vmware vcenter server, cloud foundation +1 moreThe vCenter Server contains a reflected cross-site scripting vulnerability due to a lack of input...CVE-2021-220166.1 Medium
- vmware vcenter server, cloud foundation +1 moreThe vCenter Server contains an authenticated code execution vulnerability in VAMI (Virtual...CVE-2021-220147.2 High
- vmware vcenter server, cloud foundation +1 moreThe vCenter Server contains a file path traversal vulnerability leading to information disclosure...CVE-2021-220137.5 High
- vmware vcenter server, cloud foundation +1 moreThe vCenter Server contains an information disclosure vulnerability due to an unauthenticated...CVE-2021-220127.5 High
- vmware vcenter server, cloud foundation +1 morevCenter Server contains an unauthenticated API endpoint vulnerability in vCenter Server Content...CVE-2021-220115.3 Medium
- vmware vcenter server, cloud foundation +1 moreThe vCenter Server contains a denial-of-service vulnerability in VPXD service. A malicious actor...CVE-2021-220107.5 High
- vmware vcenter server, cloud foundation +1 moreThe vCenter Server contains multiple denial-of-service vulnerabilities in VAPI (vCenter API)...CVE-2021-220097.5 High
- vmware vcenter server, cloud foundation +1 moreThe vCenter Server contains an information disclosure vulnerability in VAPI (vCenter API) service...CVE-2021-220087.5 High
- vmware vcenter server, cloud foundation +1 moreThe vCenter Server contains a local information disclosure vulnerability in the Analytics service...CVE-2021-220075.5 Medium
- vmware vcenter server, cloud foundation +1 moreThe vCenter Server contains a reverse proxy bypass vulnerability due to the way the endpoints...CVE-2021-22006Public exploit7.5 High
- vmware vcenter server, cloud foundation +1 moreThe vCenter Server contains an arbitrary file upload vulnerability in the Analytics service. A...CVE-2021-22005In KEVPublic exploitEPSS 100.0%9.8 Critical
- vmware vcenter server, cloud foundation +1 moreThe vCenter Server contains an SSRF (Server Side Request Forgery) vulnerability due to improper...CVE-2021-219936.5 Medium
- vmware vcenter server, cloud foundation +1 moreThe vCenter Server contains multiple local privilege escalation vulnerabilities due to improper...CVE-2021-22015Public exploit7.8 High
- Show moreLoading…