Skip to contentVmware Vcenter Server vulnerabilities
- vmware vcenter serverUnder certain conditions, vmdir that ships with VMware vCenter Server, as part of an embedded or...CVE-2020-3952In KEVPublic exploitEPSS 90.4%9.8 Critical
- vmware vcenter server, vcenter server appliance +1 moreSensitive information disclosure vulnerability resulting from a lack of certificate validation...CVE-2019-55385.9 Medium
- vmware vcenter server, vcenter server appliance +1 moreSensitive information disclosure vulnerability resulting from a lack of certificate validation...CVE-2019-55375.9 Medium
- vmware esxi, vcenter server, vsphere esxi +2 moreVMware vSphere ESXi (6.7 prior to ESXi670-201904101-SG, 6.5 prior to ESXi650-201907101-SG, 6.0...CVE-2019-55315.4 Medium
- vmware vcenter serverVMware vCenter Server (6.7.x prior to 6.7 U3, 6.5 prior to 6.5 U3 and 6.0 prior to 6.0 U3j)...CVE-2019-55327.7 High
- vmware vcenter serverVMware vCenter Server (6.7.x prior to 6.7 U3, 6.5 prior to 6.5 U3 and 6.0 prior to 6.0 U3j)...CVE-2019-55347.7 High
- vmware vcenter server appliance (vcsa), vcenter server +1 moreVMware vCenter Server Appliance (vCSA) (6.5 before 6.5 U1d) contains a local privilege escalation...CVE-2017-49437.8 High
- vmware vsphere web client, vcenter server +1 moreThe flash-based vSphere Web Client (6.0 prior to 6.0 U3c and 5.5 prior to 5.5 U3f) i.e. not the...CVE-2017-49287.5 High
- vmware vcenter serverVMware vCenter Server (6.5 prior to 6.5 U1 and 6.0 prior to 6.0 U3c) does not correctly handle...CVE-2017-49277.5 High
- vmware vcenter serverVMware vCenter Server (6.5 prior to 6.5 U1) contains a vulnerability that may allow for stored...CVE-2017-49265.4 Medium
- vmware vcenter serverVMware vCenter Server (6.5 prior to 6.5 U1) contains an information disclosure vulnerability....CVE-2017-49239.8 Critical
- vmware vcenter serverVMware vCenter Server (6.5 prior to 6.5 U1) contains an information disclosure issue due to the...CVE-2017-49226.5 Medium
- vmware vcenter serverVMware vCenter Server (6.5 prior to 6.5 U1) contains an insecure library loading issue that...CVE-2017-49218.8 High
- vmware vcenter serverVMware vCenter Server 5.5, 6.0, 6.5 allows vSphere users with certain, limited vSphere privileges...CVE-2017-49199.0 Critical
- vmware vcenter serverVMware vCenter Server 5.5 before U3e and 6.0 before U2a allows remote authenticated users to read...CVE-2016-74597.7 High
- vmware esxi, vcenter server +1 moreCRLF injection vulnerability in VMware vCenter Server 6.0 before U2 and ESXi 6.0 allows remote...CVE-2016-53316.1 Medium
- vmware vcenter serverCross-site scripting (XSS) vulnerability in the vSphere Web Client in VMware vCenter Server 5.0...CVE-2015-69316.1 Medium
- vmware vcenter serverCross-site scripting (XSS) vulnerability in the Web Client in VMware vCenter Server 5.1 before...CVE-2016-20786.1 Medium
- vmware vcenter server, vcloud director, vcloud automation identity appliance +2 moreClient Integration Plugin (CIP) in VMware vCenter Server 5.5 U3a, U3b, and U3c and 6.0 before U2;...CVE-2016-20767.6 High
- vmware vcenter serverThe JMX RMI service in VMware vCenter Server 5.0 before u3e, 5.1 before u3b, 5.5 before u3, and 6...CVE-2015-2342Public exploitEPSS 89.0%10.0 High
- vmware vcenter servervpxd in VMware vCenter Server 5.0 before u3e, 5.1 before u3, and 5.5 before u2 allows remote...CVE-2015-10475.0 Medium
- vmware vcenter serverVMware vCenter Server 5.5 before u3 and 6.0 before u1 does not verify X.509 certificates from TLS...CVE-2015-69325.8 Medium
- vmware vcenter server applianceVMware vCenter Server Appliance (vCSA) 5.5 before Update 2, 5.1 before Update 3, and 5.0 before...CVE-2014-83714.3 Medium
- vmware vcenter server applianceCross-site scripting (XSS) vulnerability in VMware vCenter Server Appliance (vCSA) 5.1 before...CVE-2014-37974.3 Medium
- gnu bash, apple mac os x, arista eos +71 more +73 moreGNU Bash through 4.3 bash43-025 processes trailing strings after certain malformed function...CVE-2014-7169In KEVPublic exploitFix availableEPSS 99.9%9.8 Critical
- gnu bash, apple mac os x, arista eos +71 more +73 moreGNU Bash through 4.3 processes trailing strings after function definitions in the values of...CVE-2014-6271In KEVPublic exploitFix availableEPSS 100.0%9.8 Critical
- oracle fusion middleware, vmware esxi, vcenter server +1 more +3 moreUnspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10...CVE-2014-42414.3 Medium
- oracle mysql, debian linux, mariadb +9 more +11 moreUnspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.37 and earlier and 5...CVE-2014-4258Fix available6.5 Medium
- vmware vcenter server applianceRuby vSphere Console (RVC) in VMware vCenter Server Appliance allows remote authenticated users...CVE-2014-37909.0 High
- vmware vcenter serverSession fixation vulnerability in the vSphere Web Client Server in VMware vCenter Server 5.0...CVE-2013-59716.8 Medium
- vmware vcenter server applianceVMware vCenter Server 5.1 before Update 1, when anonymous LDAP binding for Active Directory is...CVE-2013-31074.3 Medium
- vmware vcenter server applianceVMware vCenter Server Appliance (vCSA) 5.1 before Update 1 allows remote authenticated users to...CVE-2013-30809.0 High
- vmware vcenter server applianceVMware vCenter Server Appliance (vCSA) 5.1 before Update 1 allows remote authenticated users to...CVE-2013-30799.0 High
- vmware esxi, vcenter server, vcenter server appliance +2 moreVMware vCenter Server 4.0 before Update 4b, 5.0 before Update 2, and 5.1 before 5.1.0b; VMware...CVE-2013-16597.6 High
- vmware vcenter server, vcenter server appliance +1 moreVMware vCenter Server 4.1 before Update 3 and 5.0 before Update 2, and vCSA 5.0 before Update 2,...CVE-2012-63267.8 High
- vmware esx, esxi, vcenter server +3 more +5 moreVMware vCenter Server 4.0 before Update 4b and 4.1 before Update 3a, VMware VirtualCenter 2.5,...CVE-2013-140510.0 High
- vmware vcenter server applianceVMware vCenter Server Appliance (vCSA) 5.0 before Update 2 does not properly parse XML documents,...CVE-2012-63254.0 Medium
- vmware vcenter server applianceDirectory traversal vulnerability in VMware vCenter Server Appliance (vCSA) 5.0 before Update 2...CVE-2012-63244.0 Medium
- vmware vcenter serverThe vCenter Tomcat Management Application in VMware vCenter Server 4.1 before Update 1 stores log...CVE-2010-29282.1 Low
- linux kernel, canonical ubuntu linux, fedoraproject fedora +9 more +11 moreThe udp_sendmsg function in the UDP implementation in (1) net/ipv4/udp.c and (2) net/ipv6/udp.c...CVE-2009-2698Public exploit7.8 High
- xmlsoft libxml, libxml2, apple iphone os +16 more +18 moreMultiple use-after-free vulnerabilities in libxml2 2.5.10, 2.6.16, 2.6.26, 2.6.27, and 2.6.32,...CVE-2009-2416Fix available6.5 Medium
- debian linux, linux kernel, canonical ubuntu linux +8 more +10 morenfsd in the Linux kernel before 2.6.28.9 does not drop the CAP_MKNOD capability before handling a...CVE-2009-10724.9 Medium