Skip to contentVmware Vcenter vulnerabilities
- vmware cloud foundation, vcenter server +1 moreThe vSphere Client (HTML5) contains a remote code execution vulnerability in a vCenter Server...CVE-2021-21972In KEVPublic exploitEPSS 99.9%9.8 Critical
- vmware cloud foundation, vcenter server, vcenter server and cloud foundation +2 moreThe vSphere Client (HTML5) contains an SSRF (Server Side Request Forgery) vulnerability due to...CVE-2021-21973In KEVPublic exploitEPSS 88.0%5.3 Medium
- vmware vcenter server, cloud foundation +1 moreVMware vCenter Server (6.7 before 6.7u3, 6.6 before 6.5u3k) contains a session hijack...CVE-2020-39947.4 High
- vmware esxi, vcenter server, cloud foundation +2 moreVMware ESXi and vCenter Server contain a partial denial of service vulnerability in their...CVE-2020-39765.3 Medium
- vmware vcenter serverUnder certain conditions, vmdir that ships with VMware vCenter Server, as part of an embedded or...CVE-2020-3952In KEVPublic exploitEPSS 90.4%9.8 Critical
- vmware vcenter server, vcenter server appliance +1 moreSensitive information disclosure vulnerability resulting from a lack of certificate validation...CVE-2019-55385.9 Medium
- vmware vcenter server, vcenter server appliance +1 moreSensitive information disclosure vulnerability resulting from a lack of certificate validation...CVE-2019-55375.9 Medium
- vmware esxi, vcenter server, vsphere esxi +2 moreVMware vSphere ESXi (6.7 prior to ESXi670-201904101-SG, 6.5 prior to ESXi650-201907101-SG, 6.0...CVE-2019-55315.4 Medium
- vmware vcenter serverVMware vCenter Server (6.7.x prior to 6.7 U3, 6.5 prior to 6.5 U3 and 6.0 prior to 6.0 U3j)...CVE-2019-55327.7 High
- vmware vcenter serverVMware vCenter Server (6.7.x prior to 6.7 U3, 6.5 prior to 6.5 U3 and 6.0 prior to 6.0 U3j)...CVE-2019-55347.7 High
- vmware vcenter server appliance (vcsa), vcenter server +1 moreVMware vCenter Server Appliance (vCSA) (6.5 before 6.5 U1d) contains a local privilege escalation...CVE-2017-49437.8 High
- vmware vsphere web client, vcenter server +1 moreThe flash-based vSphere Web Client (6.0 prior to 6.0 U3c and 5.5 prior to 5.5 U3f) i.e. not the...CVE-2017-49287.5 High
- vmware vcenter serverVMware vCenter Server (6.5 prior to 6.5 U1 and 6.0 prior to 6.0 U3c) does not correctly handle...CVE-2017-49277.5 High
- vmware vcenter serverVMware vCenter Server (6.5 prior to 6.5 U1) contains a vulnerability that may allow for stored...CVE-2017-49265.4 Medium
- vmware vcenter serverVMware vCenter Server (6.5 prior to 6.5 U1) contains an information disclosure vulnerability....CVE-2017-49239.8 Critical
- vmware vcenter serverVMware vCenter Server (6.5 prior to 6.5 U1) contains an information disclosure issue due to the...CVE-2017-49226.5 Medium
- vmware vcenter serverVMware vCenter Server (6.5 prior to 6.5 U1) contains an insecure library loading issue that...CVE-2017-49218.8 High
- vmware vcenter serverVMware vCenter Server 5.5, 6.0, 6.5 allows vSphere users with certain, limited vSphere privileges...CVE-2017-49199.0 Critical
- vmware vcenter serverVMware vCenter Server 5.5 before U3e and 6.0 before U2a allows remote authenticated users to read...CVE-2016-74597.7 High
- vmware esxi, vcenter server +1 moreCRLF injection vulnerability in VMware vCenter Server 6.0 before U2 and ESXi 6.0 allows remote...CVE-2016-53316.1 Medium
- vmware vcenter serverCross-site scripting (XSS) vulnerability in the vSphere Web Client in VMware vCenter Server 5.0...CVE-2015-69316.1 Medium
- vmware vcenter serverCross-site scripting (XSS) vulnerability in the Web Client in VMware vCenter Server 5.1 before...CVE-2016-20786.1 Medium
- vmware vcenter server, vcloud director, vcloud automation identity appliance +2 moreClient Integration Plugin (CIP) in VMware vCenter Server 5.5 U3a, U3b, and U3c and 6.0 before U2;...CVE-2016-20767.6 High
- vmware vcenter orchestrator, vrealize orchestrator +1 moreSerialized-object interfaces in VMware vRealize Orchestrator 6.x, vCenter Orchestrator 5.x,...CVE-2015-69347.3 High
- vmware vcenter serverThe JMX RMI service in VMware vCenter Server 5.0 before u3e, 5.1 before u3b, 5.5 before u3, and 6...CVE-2015-2342Public exploitEPSS 89.0%10.0 High
- vmware vcenter servervpxd in VMware vCenter Server 5.0 before u3e, 5.1 before u3, and 5.5 before u2 allows remote...CVE-2015-10475.0 Medium
- vmware vcenter serverVMware vCenter Server 5.5 before u3 and 6.0 before u1 does not verify X.509 certificates from TLS...CVE-2015-69325.8 Medium
- vmware vcenter server applianceVMware vCenter Server Appliance (vCSA) 5.5 before Update 2, 5.1 before Update 3, and 5.0 before...CVE-2014-83714.3 Medium
- vmware vcenter server applianceCross-site scripting (XSS) vulnerability in VMware vCenter Server Appliance (vCSA) 5.1 before...CVE-2014-37974.3 Medium
- gnu bash, apple mac os x, arista eos +71 more +73 moreGNU Bash through 4.3 bash43-025 processes trailing strings after certain malformed function...CVE-2014-7169In KEVPublic exploitFix availableEPSS 99.9%9.8 Critical
- gnu bash, apple mac os x, arista eos +71 more +73 moreGNU Bash through 4.3 processes trailing strings after function definitions in the values of...CVE-2014-6271In KEVPublic exploitFix availableEPSS 100.0%9.8 Critical
- oracle fusion middleware, vmware esxi, vcenter server +1 more +3 moreUnspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10...CVE-2014-42414.3 Medium
- oracle mysql, debian linux, mariadb +9 more +11 moreUnspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.37 and earlier and 5...CVE-2014-4258Fix available6.5 Medium
- vmware vcenter server applianceRuby vSphere Console (RVC) in VMware vCenter Server Appliance allows remote authenticated users...CVE-2014-37909.0 High
- vmware vcenter serverSession fixation vulnerability in the vSphere Web Client Server in VMware vCenter Server 5.0...CVE-2013-59716.8 Medium
- vmware vcenter chargeback managerVMware vCenter Chargeback Manager (aka CBM) before 2.5.1 does not proper handle uploads, which...CVE-2013-3520Public exploitEPSS 55.6%7.5 High
- vmware vcenter server applianceVMware vCenter Server 5.1 before Update 1, when anonymous LDAP binding for Active Directory is...CVE-2013-31074.3 Medium
- vmware vcenter server applianceVMware vCenter Server Appliance (vCSA) 5.1 before Update 1 allows remote authenticated users to...CVE-2013-30809.0 High
- vmware vcenter server applianceVMware vCenter Server Appliance (vCSA) 5.1 before Update 1 allows remote authenticated users to...CVE-2013-30799.0 High
- vmware esxi, vcenter server, vcenter server appliance +2 moreVMware vCenter Server 4.0 before Update 4b, 5.0 before Update 2, and 5.1 before 5.1.0b; VMware...CVE-2013-16597.6 High
- vmware vcenter server, vcenter server appliance +1 moreVMware vCenter Server 4.1 before Update 3 and 5.0 before Update 2, and vCSA 5.0 before Update 2,...CVE-2012-63267.8 High
- vmware esx, esxi, vcenter server +3 more +5 moreVMware vCenter Server 4.0 before Update 4b and 4.1 before Update 3a, VMware VirtualCenter 2.5,...CVE-2013-140510.0 High
- vmware vcenter server applianceVMware vCenter Server Appliance (vCSA) 5.0 before Update 2 does not properly parse XML documents,...CVE-2012-63254.0 Medium
- vmware vcenter server applianceDirectory traversal vulnerability in VMware vCenter Server Appliance (vCSA) 5.0 before Update 2...CVE-2012-63244.0 Medium
- vmware vcenter operationsCross-site scripting (XSS) vulnerability in the server in VMware vCenter Operations (aka vCOps)...CVE-2012-50504.3 Medium
- vmware vcenter orchestratorThe Web Configuration tool in VMware vCenter Orchestrator (vCO) 4.0 before Update 4, 4.1 before...CVE-2012-15134.0 Medium
- vmware vcenter chargeback managerVMware vCenter Chargeback Manager (aka CBM) before 2.0.1 does not properly handle XML API...CVE-2012-14726.4 Medium
- vmware vcenter update managerThe default configuration of the HTTP server in Jetty in vSphere Update Manager in VMware vCenter...CVE-2011-4404Public exploitEPSS 58.9%5.0 Medium
- vmware esx, esxi, vcenter +2 moreThe self-extracting installer in the vSphere Client Installer package in VMware vCenter 4.0...CVE-2011-17895.0 Medium
- vmware vcentervCenter Server in VMware vCenter 4.0 before Update 3 and 4.1 before Update 1 allows local users...CVE-2011-17882.1 Low
- Show moreLoading…