Skip to contentVmware vulnerabilities
Products
Show 120 moreShow less
Newest
- vmware esxi, fusion, workstation +2 moreVMware ESXi (6.7, 6.5, 6.0), Workstation (15.x and 14.x) and Fusion (11.x and 10.x) contain a...CVE-2018-69776.5 Medium
- vmware airwatch console, workspace one unified endpoint management console (airwatch console) +1 moreThe VMware Workspace ONE Unified Endpoint Management Console (A/W Console) 9.7.x prior to 9.7.0.3...CVE-2018-69797.4 High
- pivotal spring amqp, spring amqp, pivotal software spring advanced message queuing protocol +1 more +3 moreTLS validation errorCVE-2018-11087Fix available5.9 Medium
- vmware content locker for ios, workspace one +1 moreThe VMware Content Locker for iOS prior to 4.14 contains a data protection vulnerability in the...CVE-2018-69765.3 Medium
- vmware airwatch agent for ios prior to 5.8.1, intelligent hub +1 moreThe AirWatch Agent for iOS prior to 5.8.1 contains a data protection vulnerability whereby the...CVE-2018-69755.5 Medium
- vmware fusion, workstation +1 moreVMware Workstation (14.x before 14.1.3) and Fusion (10.x before 10.1.3) contain an out-of-bounds...CVE-2018-69738.8 High
- vmware horizon client, horizon view, horizon 6, horizon 7, and horizon client +2 moreVMware Horizon 6 (6.x.x before 6.2.7), Horizon 7 (7.x.x before 7.5.1), and Horizon Client (4.x.x...CVE-2018-69706.5 Medium
- vmware esxi, fusion, workstation +2 moreVMware ESXi (6.7 before ESXi670-201806401-BG, 6.5 before ESXi650-201806401-BG, 6.0 before ESXi600...CVE-2018-69726.5 Medium
- vmware horizon view agent, horizon view agents +1 moreVMware Horizon View Agents (7.x.x before 7.5.1) contain a local information disclosure...CVE-2018-69717.8 High
- vmware toolsVMware Tools (10.x and prior before 10.3.0) contains an out-of-bounds read vulnerability in HGFS....CVE-2018-69697.0 High
- vmware esxi, fusion, workstation +1 more +3 moreVMware ESXi (6.7 before ESXi670-201806401-BG), Workstation (14.x before 14.1.2), and Fusion (10.x...CVE-2018-69678.1 High
- vmware esxi, fusion, workstation +1 more +3 moreVMware ESXi (6.7 before ESXi670-201806401-BG), Workstation (14.x before 14.1.2), and Fusion (10.x...CVE-2018-69668.1 High
- vmware esxi, fusion, workstation +1 more +3 moreVMware ESXi (6.7 before ESXi670-201806401-BG), Workstation (14.x before 14.1.2), and Fusion (10.x...CVE-2018-69658.1 High
- pivotal spring framework, debian linux, oracle agile product lifecycle management +25 more +27 moreModerate severity vulnerability that affects org.springframework:spring-coreCVE-2018-11040Fix available7.5 High
- pivotal spring framework, debian linux, oracle agile product lifecycle management +30 more +32 moreSpring Framework Cross Site Tracing (XST)CVE-2018-11039Fix available5.9 Medium
- vmware airwatch agentThe VMware AirWatch Agent for Android prior to 8.2 and AirWatch Agent for Windows Mobile prior to...CVE-2018-696810.0 Critical
- vmware sd-wan edge, nsx sd-wan by velocloud +1 moreVMware NSX SD-WAN Edge by VeloCloud prior to version 3.1.0 contains a command injection...CVE-2018-6961In KEVPublic exploitEPSS 85.5%8.1 High
- vmware horizon client for linux, horizon client +1 moreVMware Horizon Client for Linux (4.x before 4.8.0 and prior) contains a local privilege...CVE-2018-69647.8 High
- vmware fusion, workstation +1 moreVMware Workstation (14.x before 14.1.2) and Fusion (10.x before 10.1.2) contain multiple denial...CVE-2018-69635.5 Medium
- vmware fusionVMware Fusion (10.x before 10.1.2) contains a signature bypass vulnerability which may lead to a...CVE-2018-69627.8 High
- pivotal spring integration zipspring-integration-zip Arbitrary File WriteCVE-2018-1263Public exploitFix available4.7 Medium
- pivotal spring integration zipPath traversal in org.springframework.integration:spring-integration-zipCVE-2018-1261Fix available4.7 Medium
- broadcom spring data commons, xmlbeam, pivotal software spring data rest +2 moreSpring Data Commons, used in combination with XMLBeam, contains a property binder vulnerability caused by improper restriction of XML external entity referencesCVE-2018-1259Public exploitFix available7.5 High
- pivotal spring framework, pivotal software spring security, netapp oncommand insight +39 more +41 moreSpring Framework when used in combination with any versions of Spring Security contains an authorization bypassCVE-2018-1258Fix available8.8 High
- pivotal spring framework, oracle agile product lifecycle management, application testing suite +27 more +29 moreDenial of Service in org.springframework:spring-coreCVE-2018-1257Fix available6.5 Medium
- pivotal spring cloud sso connectorIssuer validation regression in Spring Cloud SSO ConnectorCVE-2018-1256Fix available8.1 High
- vmware xenonVMware Xenon 1.x, prior to 1.5.4-CR7_1, 1.5.7_7, 1.5.4-CR6_2, 1.3.7-CR1_2, 1.1.0-CR0-3, 1.1.0...CVE-2017-49527.5 High
- vmware horizon daasVMware Horizon DaaS (7.x before 8.0.0) contains a broken authentication vulnerability that may...CVE-2018-69608.8 High
- broadcom spring data commons, pivotal software spring data rest, spring by pivotal framework +1 more +3 moreSpring Data Commons contain a property path parser vulnerability caused by unlimited resource allocationCVE-2018-1274Fix available7.5 High
- vmware vrealize automationVMware vRealize Automation (vRA) prior to 7.4.0 contains a vulnerability in the handling of...CVE-2018-69599.8 Critical
- vmware vrealize automationVMware vRealize Automation (vRA) prior to 7.3.1 contains a vulnerability that may allow for a DOM...CVE-2018-69586.1 Medium
- f5 big-ip (ltm, aam, afm, analytics, apm, asm, dns, edge gateway, gtm, link controller, pem, webaccelerator, websafe), big-ip access policy manager, big-ip advanced firewall manager +14 more +16 moreOn F5 BIG-IP 13.1.0-13.1.0.3 or 13.0.0, when authenticated administrative users execute commands...CVE-2018-5511Public exploitEPSS 14.2%7.2 High
- spring by pivotal framework, vmware spring framework, oracle application testing suite +17 more +19 moreSpring Framework has Improperly Implemented Security Check for StandardCVE-2018-1275Fix availableEPSS 57.7%9.8 Critical
- broadcom spring data commons, pivotal software spring data rest, apache ignite +3 more +5 moreSpring Data Commons remote code injection vulnerabilityCVE-2018-1273In KEVPublic exploitFix availableEPSS 97.0%9.8 Critical
- spring by pivotal framework, vmware spring framework, oracle application testing suite +23 more +25 morePossible privilege escalation in org.springframework:spring-coreCVE-2018-1272Fix available7.5 High
- spring by pivotal framework, vmware spring framework, oracle application testing suite +26 more +28 morePath Traversal in org.springframework:spring-coreCVE-2018-1271Fix availableEPSS 30.3%5.9 Medium
- spring by pivotal framework, vmware spring framework, debian linux +26 more +28 moreSpring Framework allows applications to expose STOMP over WebSocket endpointsCVE-2018-1270Public exploitFix availableEPSS 77.6%9.8 Critical
- vmware pivotal software mysqlMySQL for PCF tiles 1.7.x before 1.7.10 were discovered to log the AWS access key in plaintext....CVE-2016-089810.0 Critical
- dell emc spring boot, spring boot +1 moreModerate severity vulnerability that affects org.springframework.boot:spring-bootCVE-2018-1196Fix available5.9 Medium
- vmware spring framework, spring security, dell emc spring by pivotal +3 more +5 moreImproper Input Validation in org.springframework.security:spring-security-core, org.springframework.security:spring-security-core , and org.springframework:spring-coreCVE-2018-1199Fix available5.3 Medium
- vmware fusion, workstation, workstation player +1 more +3 moreVMware Workstation (14.x before 14.1.1, 12.x) and Fusion (10.x before 10.1.1 and 8.x) contain a...CVE-2018-69575.3 Medium
- vmware airwatch, airwatch console +1 moreVMware AirWatch Console (9.2.x before 9.2.2 and 9.1.x before 9.1.5) contains a Cross Site Request...CVE-2017-49518.8 High
- vmware vrealize automation, vsphere integrated containers +1 moreVMware Realize Automation (7.3 and 7.2) and vSphere Integrated Containers (1.x before 1.3)...CVE-2017-49479.8 Critical
- vmware fusion, workstation, workstation pro / player +2 moreVMware Workstation and Fusion contain an integer overflow vulnerability in VMware NAT service...CVE-2017-49507.0 High
- vmware fusion, workstation, workstation pro / player +2 moreVMware Workstation and Fusion contain a use-after-free vulnerability in VMware NAT service when...CVE-2017-49497.0 High
- vmware horizon view, workstation, horizon client for windows +2 moreVMware Workstation (14.x before 14.1.0 and 12.x) and Horizon View Client (4.x before 4.7.0)...CVE-2017-49487.1 High
- vmware vrealize operations for horizon (v4h), vrealize operations for published applications (v4pa), vrealize operations for horizon +1 more +3 moreThe VMware V4H and V4PA desktop agents (6.x before 6.5.1) contain a privilege escalation...CVE-2017-49467.8 High
- vmware fusion, workstation +1 moreVMware Workstation (14.x and 12.x) and Fusion (10.x and 8.x) contain a guest access control...CVE-2017-49455.5 Medium
- pivotal software spring data rest, vmware spring boot, pivotal spring data rest and spring boot +2 moreRemote code execution in PATCH requests in Spring Data RESTCVE-2017-8046Public exploitFix availableEPSS 74.5%9.8 Critical
- arm cortex-a12 firmware, cortex-a15 firmware, cortex-a17 firmware +306 more +308 moreCVE-2017-5753 does not affect BellSoft softwareCVE-2017-5753Public exploitFix availableEPSS 93.8%5.6 Medium
- Show moreLoading…