Skip to contentVmware Server vulnerabilities
- vmware vcenter server, cloud foundation +1 moreThe vCenter Server contains a local privilege escalation vulnerability due to the way it handles...CVE-2021-219917.8 High
- vmware vcenter server, cloud foundation +1 moreThe vSphere Client (HTML5) contains a vulnerability in a vSphere authentication mechanism for the...CVE-2021-21986EPSS 13.3%9.8 Critical
- vmware vcenter server, cloud foundation +1 moreThe vSphere Client (HTML5) contains a remote code execution vulnerability due to lack of input...CVE-2021-21985In KEVPublic exploitEPSS 100.0%9.8 Critical
- vmware cloud foundation, vcenter server +1 moreThe vSphere Client (HTML5) contains a remote code execution vulnerability in a vCenter Server...CVE-2021-21972In KEVPublic exploitEPSS 99.9%9.8 Critical
- vmware cloud foundation, vcenter server, vcenter server and cloud foundation +2 moreThe vSphere Client (HTML5) contains an SSRF (Server Side Request Forgery) vulnerability due to...CVE-2021-21973In KEVPublic exploitEPSS 88.0%5.3 Medium
- vmware vcenter server, cloud foundation +1 moreVMware vCenter Server (6.7 before 6.7u3, 6.6 before 6.5u3k) contains a session hijack...CVE-2020-39947.4 High
- vmware esxi, vcenter server, cloud foundation +2 moreVMware ESXi and vCenter Server contain a partial denial of service vulnerability in their...CVE-2020-39765.3 Medium
- vmware vcenter serverUnder certain conditions, vmdir that ships with VMware vCenter Server, as part of an embedded or...CVE-2020-3952In KEVPublic exploitEPSS 90.4%9.8 Critical
- vmware vcenter server, vcenter server appliance +1 moreSensitive information disclosure vulnerability resulting from a lack of certificate validation...CVE-2019-55385.9 Medium
- vmware vcenter server, vcenter server appliance +1 moreSensitive information disclosure vulnerability resulting from a lack of certificate validation...CVE-2019-55375.9 Medium
- vmware esxi, vcenter server, vsphere esxi +2 moreVMware vSphere ESXi (6.7 prior to ESXi670-201904101-SG, 6.5 prior to ESXi650-201907101-SG, 6.0...CVE-2019-55315.4 Medium
- vmware vcenter serverVMware vCenter Server (6.7.x prior to 6.7 U3, 6.5 prior to 6.5 U3 and 6.0 prior to 6.0 U3j)...CVE-2019-55327.7 High
- vmware vcenter serverVMware vCenter Server (6.7.x prior to 6.7 U3, 6.5 prior to 6.5 U3 and 6.0 prior to 6.0 U3j)...CVE-2019-55347.7 High
- vmware vcenter server appliance (vcsa), vcenter server +1 moreVMware vCenter Server Appliance (vCSA) (6.5 before 6.5 U1d) contains a local privilege escalation...CVE-2017-49437.8 High
- vmware vsphere web client, vcenter server +1 moreThe flash-based vSphere Web Client (6.0 prior to 6.0 U3c and 5.5 prior to 5.5 U3f) i.e. not the...CVE-2017-49287.5 High
- vmware vcenter serverVMware vCenter Server (6.5 prior to 6.5 U1 and 6.0 prior to 6.0 U3c) does not correctly handle...CVE-2017-49277.5 High
- vmware vcenter serverVMware vCenter Server (6.5 prior to 6.5 U1) contains a vulnerability that may allow for stored...CVE-2017-49265.4 Medium
- vmware vcenter serverVMware vCenter Server (6.5 prior to 6.5 U1) contains an information disclosure vulnerability....CVE-2017-49239.8 Critical
- vmware vcenter serverVMware vCenter Server (6.5 prior to 6.5 U1) contains an information disclosure issue due to the...CVE-2017-49226.5 Medium
- vmware vcenter serverVMware vCenter Server (6.5 prior to 6.5 U1) contains an insecure library loading issue that...CVE-2017-49218.8 High
- vmware vcenter serverVMware vCenter Server 5.5, 6.0, 6.5 allows vSphere users with certain, limited vSphere privileges...CVE-2017-49199.0 Critical
- vmware vcenter serverVMware vCenter Server 5.5 before U3e and 6.0 before U2a allows remote authenticated users to read...CVE-2016-74597.7 High
- vmware esxi, vcenter server +1 moreCRLF injection vulnerability in VMware vCenter Server 6.0 before U2 and ESXi 6.0 allows remote...CVE-2016-53316.1 Medium
- vmware vcenter serverCross-site scripting (XSS) vulnerability in the vSphere Web Client in VMware vCenter Server 5.0...CVE-2015-69316.1 Medium
- vmware vcenter serverCross-site scripting (XSS) vulnerability in the Web Client in VMware vCenter Server 5.1 before...CVE-2016-20786.1 Medium
- vmware vcenter server, vcloud director, vcloud automation identity appliance +2 moreClient Integration Plugin (CIP) in VMware vCenter Server 5.5 U3a, U3b, and U3c and 6.0 before U2;...CVE-2016-20767.6 High
- vmware vcenter serverThe JMX RMI service in VMware vCenter Server 5.0 before u3e, 5.1 before u3b, 5.5 before u3, and 6...CVE-2015-2342Public exploitEPSS 89.0%10.0 High
- vmware vcenter servervpxd in VMware vCenter Server 5.0 before u3e, 5.1 before u3, and 5.5 before u2 allows remote...CVE-2015-10475.0 Medium
- vmware vcenter serverVMware vCenter Server 5.5 before u3 and 6.0 before u1 does not verify X.509 certificates from TLS...CVE-2015-69325.8 Medium
- vmware vcenter server applianceVMware vCenter Server Appliance (vCSA) 5.5 before Update 2, 5.1 before Update 3, and 5.0 before...CVE-2014-83714.3 Medium
- vmware vcenter server applianceCross-site scripting (XSS) vulnerability in VMware vCenter Server Appliance (vCSA) 5.1 before...CVE-2014-37974.3 Medium
- gnu bash, apple mac os x, arista eos +71 more +73 moreGNU Bash through 4.3 bash43-025 processes trailing strings after certain malformed function...CVE-2014-7169In KEVPublic exploitFix availableEPSS 99.9%9.8 Critical
- gnu bash, apple mac os x, arista eos +71 more +73 moreGNU Bash through 4.3 processes trailing strings after function definitions in the values of...CVE-2014-6271In KEVPublic exploitFix availableEPSS 100.0%9.8 Critical
- oracle fusion middleware, vmware esxi, vcenter server +1 more +3 moreUnspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10...CVE-2014-42414.3 Medium
- oracle mysql, debian linux, mariadb +9 more +11 moreUnspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.37 and earlier and 5...CVE-2014-4258Fix available6.5 Medium
- vmware vcenter server applianceRuby vSphere Console (RVC) in VMware vCenter Server Appliance allows remote authenticated users...CVE-2014-37909.0 High
- vmware vcenter serverSession fixation vulnerability in the vSphere Web Client Server in VMware vCenter Server 5.0...CVE-2013-59716.8 Medium
- vmware vcenter server applianceVMware vCenter Server 5.1 before Update 1, when anonymous LDAP binding for Active Directory is...CVE-2013-31074.3 Medium
- vmware vcenter server applianceVMware vCenter Server Appliance (vCSA) 5.1 before Update 1 allows remote authenticated users to...CVE-2013-30809.0 High
- vmware vcenter server applianceVMware vCenter Server Appliance (vCSA) 5.1 before Update 1 allows remote authenticated users to...CVE-2013-30799.0 High
- vmware esxi, vcenter server, vcenter server appliance +2 moreVMware vCenter Server 4.0 before Update 4b, 5.0 before Update 2, and 5.1 before 5.1.0b; VMware...CVE-2013-16597.6 High
- vmware vcenter server, vcenter server appliance +1 moreVMware vCenter Server 4.1 before Update 3 and 5.0 before Update 2, and vCSA 5.0 before Update 2,...CVE-2012-63267.8 High
- vmware esx, esxi, vcenter server +3 more +5 moreVMware vCenter Server 4.0 before Update 4b and 4.1 before Update 3a, VMware VirtualCenter 2.5,...CVE-2013-140510.0 High
- vmware vcenter server applianceVMware vCenter Server Appliance (vCSA) 5.0 before Update 2 does not properly parse XML documents,...CVE-2012-63254.0 Medium
- vmware vcenter server applianceDirectory traversal vulnerability in VMware vCenter Server Appliance (vCSA) 5.0 before Update 2...CVE-2012-63244.0 Medium
- vmware tc serverVMware vFabric tc Server (aka SpringSource tc Server) 2.0.x before 2.0.6.RELEASE and 2.1.x before...CVE-2011-05275.0 Medium
- vmware vcenter serverThe vCenter Tomcat Management Application in VMware vCenter Server 4.1 before Update 1 stores log...CVE-2010-29282.1 Low
- vmware fusion, player, server +1 more +3 morevmware-mount in VMware Workstation 7.x before 7.1.2 build 301548 on Linux, VMware Player 3.1.x...CVE-2010-42967.2 High
- vmware fusion, player, server +1 more +3 moreRace condition in the mounting process in vmware-mount in VMware Workstation 7.x before 7.1.2...CVE-2010-42956.9 Medium
- vmware movie decoder, player, server +1 more +3 moreThe frame decompression functionality in the VMnc media codec in VMware Movie Decoder before 6.5...CVE-2010-42949.3 High
- Show moreLoading…