Vmware Vcenter Server vulnerabilities

• vmware esxi, vcenter server, cloud foundation +2 more +4 more VMware ESXi and vCenter Server Reflected Cross Site Scripting (XSS) Vulnerability CVE-2025-41228 Public exploit 4.3 MediumMay 20, 2025
• vmware vcenter server, cloud foundation, telco cloud infrastructure +1 more +3 more VMware vCenter Server authenticated command-execution vulnerability CVE-2025-41225 8.8 HighMay 20, 2025
• vmware vcenter server, broadcom vmware center server, vmware cloud foundation +1 more +3 more Privilege escalation vulnerability CVE-2024-38813 In KEV EPSS 17.4% 7.5 HighSeptember 17, 2024
• vmware vcenter server, broadcom vmware cloud foundation, vmware vcenter server +1 more +3 more Heap-overflow vulnerability CVE-2024-38812 In KEV EPSS 54.6% 9.8 CriticalSeptember 17, 2024
• vmware vcenter server, cloud foundation +1 more The vCenter Server contains a denial-of-service vulnerability. A malicious actor with network... CVE-2024-37087 5.3 MediumJune 25, 2024
• vmware vcenter server, cloud foundation, cloud foundation (vcenter server) +2 more The vCenter Server contains a partial file read vulnerability. A malicious actor with... CVE-2024-22275 Public exploit 4.9 MediumMay 21, 2024
• vmware vcenter server, broadcom vmware center server, vmware cloud foundation +1 more +3 more The vCenter Server contains an authenticated remote code execution vulnerability. A malicious... CVE-2024-22274 Public exploit 7.2 HighMay 21, 2024
• vmware vcenter server, cloud foundation (vmware vcenter server) +1 more VMware vCenter Server Partial Information Disclosure Vulnerability CVE-2023-34056 4.3 MediumOctober 25, 2023
• vmware vcenter server, cloud foundation, cloud foundation (vmware vcenter server) +2 more VMware vCenter Server Out-of-Bounds Write Vulnerability CVE-2023-34048 In KEV EPSS 99.2% 9.8 CriticalOctober 25, 2023
• vmware vcenter server, cloud foundation (vcenter server), vcenter server (vcenter server) +2 more The VMware vCenter Server contains an out-of-bounds read vulnerability in the implementation of... CVE-2023-20896 5.9 MediumJune 22, 2023
• vmware vcenter server, cloud foundation (vcenter server), vcenter server (vcenter server) +2 more The VMware vCenter Server contains a memory corruption vulnerability in the implementation of the... CVE-2023-20895 8.1 HighJune 22, 2023
• vmware vcenter server, cloud foundation (vcenter server), vcenter server (vcenter server) +2 more The VMware vCenter Server contains an out-of-bounds write vulnerability in the implementation of... CVE-2023-20894 EPSS 33.9% 8.1 HighJune 22, 2023
• vmware vcenter server, cloud foundation (vcenter server), vcenter server (vcenter server) +2 more The VMware vCenter Server contains a use-after-free vulnerability in the implementation of the... CVE-2023-20893 8.1 HighJune 22, 2023
• vmware vcenter server, cloud foundation (vcenter server), vcenter server (vcenter server) +2 more VMware vCenter Server heap-overflow vulnerability CVE-2023-20892 8.1 HighJune 22, 2023
• vmware vcenter server, cloud foundation +1 more The vCenter Server contains an information disclosure vulnerability due to improper permission of... CVE-2022-22948 In KEVPublic exploit EPSS 13.3% 6.5 MediumMarch 29, 2022
• vmware vcenter server Rhttproxy as used in vCenter Server contains a vulnerability due to improper implementation of... CVE-2021-22017 In KEV EPSS 49.2% 5.3 MediumSeptember 23, 2021
• vmware vcenter server, cloud foundation +1 more The vCenter Server contains an arbitrary file upload vulnerability in the Analytics service. A... CVE-2021-22005 In KEVPublic exploit EPSS 100.0% 9.8 CriticalSeptember 23, 2021
• vmware vcenter server, cloud foundation +1 more The vSphere Client (HTML5) contains a remote code execution vulnerability due to lack of input... CVE-2021-21985 In KEVPublic exploit EPSS 100.0% 9.8 CriticalMay 26, 2021
• vmware cloud foundation, vcenter server +1 more The vSphere Client (HTML5) contains a remote code execution vulnerability in a vCenter Server... CVE-2021-21972 In KEVPublic exploit EPSS 99.9% 9.8 CriticalFebruary 24, 2021
• vmware cloud foundation, vcenter server, vcenter server and cloud foundation +2 more The vSphere Client (HTML5) contains an SSRF (Server Side Request Forgery) vulnerability due to... CVE-2021-21973 In KEVPublic exploit EPSS 88.0% 5.3 MediumFebruary 24, 2021
• vmware vcenter server, cloud foundation +1 more VMware vCenter Server (6.7 before 6.7u3, 6.6 before 6.5u3k) contains a session hijack... CVE-2020-3994 7.4 HighOctober 20, 2020
• vmware vcenter server Under certain conditions, vmdir that ships with VMware vCenter Server, as part of an embedded or... CVE-2020-3952 In KEVPublic exploit EPSS 90.4% 9.8 CriticalApril 10, 2020
• vmware vcenter server, vcenter server appliance +1 more Sensitive information disclosure vulnerability resulting from a lack of certificate validation... CVE-2019-5538 5.9 MediumOctober 28, 2019
• vmware vcenter server, vcenter server appliance +1 more Sensitive information disclosure vulnerability resulting from a lack of certificate validation... CVE-2019-5537 5.9 MediumOctober 28, 2019
• vmware esxi, vcenter server, vsphere esxi +2 more VMware vSphere ESXi (6.7 prior to ESXi670-201904101-SG, 6.5 prior to ESXi650-201907101-SG, 6.0... CVE-2019-5531 5.4 MediumSeptember 18, 2019
• vmware vcenter server VMware vCenter Server (6.7.x prior to 6.7 U3, 6.5 prior to 6.5 U3 and 6.0 prior to 6.0 U3j)... CVE-2019-5532 7.7 HighSeptember 18, 2019
• vmware vcenter server VMware vCenter Server (6.7.x prior to 6.7 U3, 6.5 prior to 6.5 U3 and 6.0 prior to 6.0 U3j)... CVE-2019-5534 7.7 HighSeptember 18, 2019
• vmware vcenter server appliance (vcsa), vcenter server +1 more VMware vCenter Server Appliance (vCSA) (6.5 before 6.5 U1d) contains a local privilege escalation... CVE-2017-4943 7.8 HighDecember 20, 2017
• vmware vcenter server VMware vCenter Server (6.5 prior to 6.5 U1 and 6.0 prior to 6.0 U3c) does not correctly handle... CVE-2017-4927 7.5 HighNovember 17, 2017
• vmware vcenter server VMware vCenter Server (6.5 prior to 6.5 U1) contains a vulnerability that may allow for stored... CVE-2017-4926 5.4 MediumSeptember 15, 2017
• vmware vcenter server VMware vCenter Server 5.5, 6.0, 6.5 allows vSphere users with certain, limited vSphere privileges... CVE-2017-4919 9.0 CriticalJuly 28, 2017