Vmware Server vulnerabilities

• broadcom spring authorization server, spring authorization server +1 more Spring Authorization Server: Open Redirect via request_uri parameter CVE-2026-59355 6.1 MediumAugust 27, 2026
• vmware vcenter, cloud foundation, telco cloud infrastructure +3 more +5 more vCenter authentication-bypass vulnerability CVE-2026-59309 9.8 CriticalJuly 30, 2026
• broadcom vmware vcenter, vmware vcenter, cloud foundation +4 more +6 more vCenter directory-traversal vulnerability CVE-2026-59310 In KEVPublic exploit 9.8 CriticalJuly 30, 2026
• vmware spring cloud gateway server webflux Spring Cloud Gateway Webflux SpEL Injection Vulnerability Allowing Exposure of Environment Variables CVE-2025-41253 Fix available 7.5 HighOctober 16, 2025
• vmware spring cloud gateway, spring cloud gateway server mvc +1 more CVE-2025-41235: Spring Cloud Gateway Server Forwards Headers from Untrusted Proxies CVE-2025-41235 Fix available 8.6 HighMay 30, 2025
• vmware esxi, vcenter server, cloud foundation +2 more +4 more VMware ESXi and vCenter Server Reflected Cross Site Scripting (XSS) Vulnerability CVE-2025-41228 Public exploit 4.3 MediumMay 20, 2025
• vmware vcenter server, cloud foundation, telco cloud infrastructure +1 more +3 more VMware vCenter Server authenticated command-execution vulnerability CVE-2025-41225 8.8 HighMay 20, 2025
• vmware vcenter server, broadcom vmware center server, vmware cloud foundation +1 more +3 more Privilege escalation vulnerability CVE-2024-38813 In KEV EPSS 17.4% 7.5 HighSeptember 17, 2024
• vmware vcenter server, broadcom vmware cloud foundation, vmware vcenter server +1 more +3 more Heap-overflow vulnerability CVE-2024-38812 In KEV EPSS 54.6% 9.8 CriticalSeptember 17, 2024
• vmware vcenter server, cloud foundation +1 more The vCenter Server contains a denial-of-service vulnerability. A malicious actor with network... CVE-2024-37087 5.3 MediumJune 25, 2024
• vmware vcenter server, cloud foundation +1 more The vCenter Server contains multiple local privilege escalation vulnerabilities due to... CVE-2024-37081 Public exploit 7.8 HighJune 18, 2024
• vmware vcenter server, cloud foundation +1 more vCenter Server contains a heap-overflow vulnerability in the implementation of the DCERPC... CVE-2024-37080 EPSS 12.5% 9.8 CriticalJune 18, 2024
• vmware vcenter server, broadcom vmware vcenter server, vmware cloud foundation +2 more vCenter Server contains a heap-overflow vulnerability in the implementation of the DCERPC... CVE-2024-37079 In KEV EPSS 22.4% 9.8 CriticalJune 18, 2024
• vmware vcenter server, cloud foundation, cloud foundation (vcenter server) +2 more The vCenter Server contains a partial file read vulnerability. A malicious actor with... CVE-2024-22275 Public exploit 4.9 MediumMay 21, 2024
• vmware vcenter server, broadcom vmware center server, vmware cloud foundation +1 more +3 more The vCenter Server contains an authenticated remote code execution vulnerability. A malicious... CVE-2024-22274 Public exploit 7.2 HighMay 21, 2024
• vmware vcenter server, cloud foundation (vmware vcenter server) +1 more VMware vCenter Server Partial Information Disclosure Vulnerability CVE-2023-34056 4.3 MediumOctober 25, 2023
• vmware vcenter server, cloud foundation, cloud foundation (vmware vcenter server) +2 more VMware vCenter Server Out-of-Bounds Write Vulnerability CVE-2023-34048 In KEV EPSS 99.2% 9.8 CriticalOctober 25, 2023
• vmware vcenter server, cloud foundation (vcenter server), vcenter server (vcenter server) +2 more The VMware vCenter Server contains an out-of-bounds read vulnerability in the implementation of... CVE-2023-20896 5.9 MediumJune 22, 2023
• vmware vcenter server, cloud foundation (vcenter server), vcenter server (vcenter server) +2 more The VMware vCenter Server contains a memory corruption vulnerability in the implementation of the... CVE-2023-20895 8.1 HighJune 22, 2023
• vmware vcenter server, cloud foundation (vcenter server), vcenter server (vcenter server) +2 more The VMware vCenter Server contains an out-of-bounds write vulnerability in the implementation of... CVE-2023-20894 EPSS 33.9% 8.1 HighJune 22, 2023
• vmware vcenter server, cloud foundation (vcenter server), vcenter server (vcenter server) +2 more The VMware vCenter Server contains a use-after-free vulnerability in the implementation of the... CVE-2023-20893 8.1 HighJune 22, 2023
• vmware vcenter server, cloud foundation (vcenter server), vcenter server (vcenter server) +2 more VMware vCenter Server heap-overflow vulnerability CVE-2023-20892 8.1 HighJune 22, 2023
• vmware vcenter server, cloud foundation +1 more The vCenter Server contains a denial-of-service vulnerability in the content library service. A... CVE-2022-31698 EPSS 47.8% 5.3 MediumDecember 13, 2022
• vmware vcenter server, cloud foundation +1 more The vCenter Server contains an information disclosure vulnerability due to the logging of... CVE-2022-31697 5.5 MediumDecember 13, 2022
• vmware hyperic server ** UNSUPPORTED WHEN ASSIGNED ** A security filter misconfiguration exists in VMware Hyperic... CVE-2022-38651 9.8 CriticalNovember 12, 2022
• vmware hyperic server ** UNSUPPORTED WHEN ASSIGNED ** A remote unauthenticated insecure deserialization vulnerability... CVE-2022-38650 10.0 CriticalNovember 12, 2022
• vmware vcenter server The vCenter Server contains an unsafe deserialisation vulnerability in the PSC (Platform services... CVE-2022-31680 EPSS 31.1% 9.1 CriticalOctober 7, 2022
• vmware vcenter server, cloud foundation +1 more The vCenter Server contains a server-side request forgery (SSRF) vulnerability. A malicious actor... CVE-2022-22982 7.5 HighJuly 13, 2022
• vmware vcenter server, cloud foundation +1 more The vCenter Server contains an information disclosure vulnerability due to improper permission of... CVE-2022-22948 In KEVPublic exploit EPSS 13.3% 6.5 MediumMarch 29, 2022
• vmware vcenter server The vSphere Web Client (FLEX/Flash) contains an SSRF (Server Side Request Forgery) vulnerability... CVE-2021-22049 9.8 CriticalNovember 24, 2021
• vmware vcenter server, cloud foundation +1 more The vSphere Web Client (FLEX/Flash) contains an unauthorized arbitrary file read vulnerability. A... CVE-2021-21980 Public exploit 7.5 HighNovember 24, 2021
• vmware vcenter server, cloud foundation +1 more The vCenter Server contains a privilege escalation vulnerability in the IWA (Integrated Windows... CVE-2021-22048 EPSS 10.3% 8.8 HighNovember 10, 2021
• vmware vcenter server, cloud foundation +1 more The vCenter Server contains a denial-of-service vulnerability in the Analytics service.... CVE-2021-22020 5.5 MediumSeptember 23, 2021
• vmware vcenter server, cloud foundation +1 more The vCenter Server contains a denial-of-service vulnerability in VAPI (vCenter API) service. A... CVE-2021-22019 7.5 HighSeptember 23, 2021
• vmware vcenter server, cloud foundation +1 more The vCenter Server contains an arbitrary file deletion vulnerability in a VMware vSphere Life... CVE-2021-22018 6.5 MediumSeptember 23, 2021
• vmware vcenter server Rhttproxy as used in vCenter Server contains a vulnerability due to improper implementation of... CVE-2021-22017 In KEV EPSS 49.2% 5.3 MediumSeptember 23, 2021
• vmware vcenter server, cloud foundation +1 more The vCenter Server contains a reflected cross-site scripting vulnerability due to a lack of input... CVE-2021-22016 6.1 MediumSeptember 23, 2021
• vmware vcenter server, cloud foundation +1 more The vCenter Server contains an authenticated code execution vulnerability in VAMI (Virtual... CVE-2021-22014 7.2 HighSeptember 23, 2021
• vmware vcenter server, cloud foundation +1 more The vCenter Server contains a file path traversal vulnerability leading to information disclosure... CVE-2021-22013 7.5 HighSeptember 23, 2021
• vmware vcenter server, cloud foundation +1 more The vCenter Server contains an information disclosure vulnerability due to an unauthenticated... CVE-2021-22012 7.5 HighSeptember 23, 2021
• vmware vcenter server, cloud foundation +1 more vCenter Server contains an unauthenticated API endpoint vulnerability in vCenter Server Content... CVE-2021-22011 5.3 MediumSeptember 23, 2021
• vmware vcenter server, cloud foundation +1 more The vCenter Server contains a denial-of-service vulnerability in VPXD service. A malicious actor... CVE-2021-22010 7.5 HighSeptember 23, 2021
• vmware vcenter server, cloud foundation +1 more The vCenter Server contains multiple denial-of-service vulnerabilities in VAPI (vCenter API)... CVE-2021-22009 7.5 HighSeptember 23, 2021
• vmware vcenter server, cloud foundation +1 more The vCenter Server contains an information disclosure vulnerability in VAPI (vCenter API) service... CVE-2021-22008 7.5 HighSeptember 23, 2021
• vmware vcenter server, cloud foundation +1 more The vCenter Server contains a local information disclosure vulnerability in the Analytics service... CVE-2021-22007 5.5 MediumSeptember 23, 2021
• vmware vcenter server, cloud foundation +1 more The vCenter Server contains a reverse proxy bypass vulnerability due to the way the endpoints... CVE-2021-22006 Public exploit 7.5 HighSeptember 23, 2021
• vmware vcenter server, cloud foundation +1 more The vCenter Server contains an arbitrary file upload vulnerability in the Analytics service. A... CVE-2021-22005 In KEVPublic exploit EPSS 100.0% 9.8 CriticalSeptember 23, 2021
• vmware vcenter server, cloud foundation +1 more The vCenter Server contains an SSRF (Server Side Request Forgery) vulnerability due to improper... CVE-2021-21993 6.5 MediumSeptember 23, 2021
• vmware vcenter server, cloud foundation +1 more The vCenter Server contains multiple local privilege escalation vulnerabilities due to improper... CVE-2021-22015 Public exploit 7.8 HighSeptember 23, 2021
• vmware vcenter server, cloud foundation +1 more The vCenter Server contains a denial-of-service vulnerability due to improper XML entity parsing.... CVE-2021-21992 6.5 MediumSeptember 22, 2021
• Show olderLoading…