Skip to contentVmware vulnerabilities
Products
Show 120 moreShow less
Newest
- spring by vmware integration, vmware spring integration, oracle banking corporate lending process management +6 more +8 moreKryo Configuration Allows Code Execution with Unknown "Serialization Gadgets"CVE-2020-5413Fix available9.8 Critical
- vmware gemfire, vmware tanzu gemfire for vms, vmware tanzu gemfire for virtual machines +2 moreJMX Insecure Default Configuration in GemFireCVE-2020-53968.8 High
- vmware gemfire, vmware tanzu gemfire for vms, vmware tanzu gemfire for virtual machines +2 moreJMX Credential Deserialization in GemFireCVE-2019-112869.0 Critical
- gnu grub2, open source grub, debian linux +2 more +4 moreA flaw was found in grub2, prior to version 2.06. An attacker may use the GRUB 2 flaw to hijack...CVE-2020-10713Public exploitFix available8.2 High
- vmware fusion, horizon client, remote console +2 moreVMware Fusion (11.x before 11.5.5), VMware Remote Console for Mac (11.x and prior before 11.2.0 )...CVE-2020-39747.8 High
- arista velocloud orchestrator, vmware sd-wan by velocloud +1 moreThe VeloCloud Orchestrator does not apply correct input validation which allows for blind SQL...CVE-2020-39738.8 High
- vmware esxi, fusion, workstation +1 more +3 moreVMware ESXi (6.7 before ESXi670-201904101-SG and 6.5 before ESXi650-201907101-SG), Workstation ...CVE-2020-39715.5 Medium
- vmware esxi, fusion, workstation +1 more +3 moreVMware ESXi (7.0 before ESXi_7.0.0-1.20.16321839, 6.7 before ESXi670-202006401-SG and 6.5 before...CVE-2020-39655.5 Medium
- vmware esxi, fusion, workstation +1 more +3 moreVMware ESXi (7.0 before ESXi_7.0.0-1.20.16321839, 6.7 before ESXi670-202006401-SG and 6.5 before...CVE-2020-39644.7 Medium
- vmware esxi, fusion, workstation +1 more +3 moreVMware ESXi (7.0 before ESXi_7.0.0-1.20.16321839, 6.7 before ESXi670-202006401-SG and 6.5 before...CVE-2020-39635.5 Medium
- vmware esxi, fusion, workstation +1 more +3 moreVMware ESXi (7.0 before ESXi_7.0.0-1.20.16321839, 6.7 before ESXi670-202004101-SG and 6.5 before...CVE-2020-39667.5 High
- vmware esxi, fusion, workstation +1 more +3 moreVMware ESXi (7.0 before ESXi_7.0.0-1.20.16321839, 6.7 before ESXi670-202004101-SG and 6.5 before...CVE-2020-39688.2 High
- vmware esxi, fusion, workstation +1 more +3 moreVMware ESXi (7.0 before ESXi_7.0.0-1.20.16321839, 6.7 before ESXi670-202004101-SG and 6.5 before...CVE-2020-39677.5 High
- vmware esxi, fusion, workstation +1 more +3 moreVMware ESXi (7.0 before ESXi_7.0.0-1.20.16321839, 6.7 before ESXi670-202004101-SG and 6.5 before...CVE-2020-39703.8 Low
- vmware esxi, fusion, workstation +1 more +3 moreVMware ESXi (7.0 before ESXi_7.0.0-1.20.16321839, 6.7 before ESXi670-202004101-SG and 6.5 before...CVE-2020-39628.2 High
- vmware esxi, fusion, workstation +1 more +3 moreVMware ESXi (7.0 before ESXi_7.0.0-1.20.16321839, 6.7 before ESXi670-202004101-SG and 6.5 before...CVE-2020-39697.8 High
- vmware toolsVMware Tools for macOS (11.x.x and prior before 11.1.1) contains a denial-of-service...CVE-2020-39723.3 Low
- vmware horizon client, horizon client for windows +1 moreVMware Horizon Client for Windows (prior to 5.4.3) contains a privilege escalation vulnerability...CVE-2020-39617.8 High
- spring cloud config, vmware spring cloud config, vmware tanzu spring cloud configuration (config) server +2 moreDirectory Traversal with spring-cloud-config-serverCVE-2020-5410In KEVPublic exploitFix availableEPSS 95.6%7.5 High
- vmware esxi, fusion, workstation +2 moreVMware ESXi (6.7 before ESXi670-202004101-SG and 6.5 before ESXi650-202005401-SG), VMware...CVE-2020-39593.3 Low
- vmware esxi, fusion, workstation +2 moreVMware ESXi (6.7 before ESXi670-202004101-SG and 6.5 before ESXi650-202005401-SG), VMware...CVE-2020-39585.5 Medium
- vmware fusion, horizon client, remote console +2 more +4 moreVMware Fusion (11.x before 11.5.5), VMware Remote Console for Mac (11.x and prior) and VMware...CVE-2020-39577.0 High
- vmware vcloud directorVMware Cloud Director 10.0.x before 10.0.0.2, 9.7.0.x before 9.7.0.5, 9.5.0.x before 9.5.0.6, and...CVE-2020-3956Public exploitEPSS 21.1%8.8 High
- pivotal software spring security, spring security +1 moreDictionary attack with Spring Security queryable text encryptorCVE-2020-5408Fix available6.5 Medium
- saltstack salt, blackberry workspaces server, canonical ubuntu linux +3 more +5 moreSaltStack Salt is vulnerable Arbitrary Directory AccessCVE-2020-11652In KEVPublic exploitFix availableEPSS 86.4%6.5 Medium
- saltstack salt, canonical ubuntu linux, debian linux +2 more +4 moreSaltStack Salt Unauthenticated Remote Code ExecutionCVE-2020-11651In KEVPublic exploitFix availableEPSS 96.6%9.8 Critical
- vmware esxiESXi 6.5 without patch ESXi650-201912104-SG and ESXi 6.7 without patch ESXi670-202004103-SG do...CVE-2020-39559.3 Critical
- vmware installbuilderInstallBuilder AutoUpdate tool and regular installers enabling <checkForUpdates> built with...CVE-2020-39467.5 High
- vmware vrealize log insightCross Site Scripting (XSS) vulnerability exists in VMware vRealize Log Insight prior to 8.1.0 due...CVE-2020-39534.8 Medium
- vmware vrealize log insightOpen Redirect vulnerability exists in VMware vRealize Log Insight prior to 8.1.0 due to improper...CVE-2020-39546.1 Medium
- pivotal vmware tanzu application service for vms, vmware tanzu application service for vms +1 morePCF Autoscaling logs its database credentialsCVE-2020-54066.5 Medium
- vmware vcenter serverUnder certain conditions, vmdir that ships with VMware vCenter Server, as part of an embedded or...CVE-2020-3952In KEVPublic exploitEPSS 90.4%9.8 Critical
- vmware fusion, horizon client, remote console +1 more +3 moreVMware Fusion (11.x before 11.5.2), VMware Remote Console for Mac (11.x and prior before 11.0.1)...CVE-2020-3950In KEVPublic exploit7.8 High
- vmware horizon client, workstation +1 moreVMware Workstation (15.x before 15.5.2) and Horizon Client for Windows (5.x and prior before 5.4...CVE-2020-39513.8 Low
- vmware horizon client, remote console, horizon client for windows +3 more +5 moreFor VMware Horizon Client for Windows (5.x and prior before 5.3.0), VMware Remote Console for...CVE-2019-55437.8 High
- vmware fusion, workstation +1 moreVMware Workstation (15.x before 15.5.2) and Fusion (11.x before 11.5.2) contain a use-after...CVE-2020-39478.8 High
- vmware fusion, workstation +1 moreLinux Guest VMs running on VMware Workstation (15.x before 15.5.2) and Fusion (11.x before 11.5.2...CVE-2020-39487.8 High
- spring cloud config, vmware spring cloud config +1 moreDirectory Traversal with spring-cloud-config-serverCVE-2020-5405Public exploitFix availableEPSS 68.5%6.5 Medium
- broadcom reactor nettyDoS Via Malformed URL with Reactor Netty HTTP ServerCVE-2020-5403Fix available6.5 Medium
- broadcom reactor nettyAuthentication Leak On Redirect With Reactor Netty HttpClientCVE-2020-5404Fix available6.5 Medium
- vmware vrealize operations for horizon adapter, vrealize operations +1 morevRealize Operations for Horizon Adapter (6.7.x prior to 6.7.1 and 6.6.x prior to 6.6.1) uses a...CVE-2020-39439.8 Critical
- vmware vrealize operations for horizon adapter, vrealize operations +1 morevRealize Operations for Horizon Adapter (6.7.x prior to 6.7.1 and 6.6.x prior to 6.6.1) has an...CVE-2020-39448.6 High
- vmware vrealize operations for horizon adapter, vrealize operations +1 morevRealize Operations for Horizon Adapter (6.7.x prior to 6.7.1 and 6.6.x prior to 6.6.1) contains...CVE-2020-39457.5 High
- spring framework, vmware spring framework, oracle application testing suite +25 more +27 moreCSRF Attack via CORS Preflight Requests with Spring MVC or Spring WebFluxCVE-2020-5397Fix available5.3 Medium
- vmware workspace one sdk, workspace one boxer, workspace one content +6 more +8 moreVMware Workspace ONE SDK and dependent mobile application updates address sensitive information...CVE-2020-39405.9 Medium
- spring framework, vmware spring framework, netapp data availability services +31 more +33 moreRFD Attack via "Content-Disposition" Header Sourced from Request Input by Spring MVC or Spring WebFlux ApplicationCVE-2020-5398Public exploitFix availableEPSS 88.3%8.0 High
- vmware tools, tools for windows (vmware tools) +1 moreThe repair operation of VMware Tools for Windows 10.x.y has a race condition which may allow for...CVE-2020-39417.0 High
- vmware spring frameworkPivotal Spring Framework contains unsafe Java deserialization methodsCVE-2016-1000027Public exploitFix availableEPSS 33.2%9.8 Critical
- vmware horizon view agent, workstation +1 moreVMware Workstation (15.x prior to 15.5.1) and Horizon View Agent (7.10.x prior to 7.10.1 and 7.5...CVE-2019-55397.8 High
- openslp, vmware esxi, horizon daas +14 more +16 moreOpenSLP as used in ESXi and the Horizon DaaS appliances has a heap overwrite issue. VMware has...CVE-2019-5544In KEVPublic exploitFix availableEPSS 98.1%9.8 Critical
- Show moreLoading…