Skip to contentVmware vulnerabilities
Products
Show 120 moreShow less
Newest
- vmware vrealize business for cloudVMware vRealize Business for Cloud 7.x prior to 7.6.0 contains a remote code execution...CVE-2021-219849.8 Critical
- vmware carbon black cloud workloadVMware Carbon Black Cloud Workload appliance 1.0.0 and 1.01 has an authentication bypass...CVE-2021-219829.1 Critical
- vmware vrealize operations manager api, vrealize operations manager, cloud foundation +1 more +3 moreServer Side Request Forgery in vRealize Operations Manager API (CVE-2021-21975) prior to 8.4 may...CVE-2021-21975In KEVPublic exploitEPSS 78.0%7.5 High
- vmware vrealize operations manager, cloud foundation, vrealize suite lifecycle manager +2 moreArbitrary file write vulnerability in vRealize Operations Manager API (CVE-2021-21983) prior to 8...CVE-2021-21983Public exploitEPSS 68.8%6.5 Medium
- netapp element plug-in for vcenter server, management services for element software and netapp hci, solidfire \& hci management node +1 more +3 moreElement Plug-in for vCenter Server incorporates SpringBoot Framework. SpringBoot Framework...CVE-2021-269879.8 Critical
- vmware view plannerVMware View Planner 4.x prior to 4.6 Security Patch 1 contains a remote code execution...CVE-2021-21978Public exploitEPSS 99.0%9.8 Critical
- vmware spring integration zipPath Traversal in Spring-integration-zipCVE-2021-22114Fix available5.3 Medium
- vmware esxi, cloud foundation +1 moreOpenSLP as used in ESXi (7.0 before ESXi70U1c-17325551, 6.7 before ESXi670-202102401-SG, 6.5...CVE-2021-21974Public exploitEPSS 45.1%8.8 High
- vmware cloud foundation, vcenter server +1 moreThe vSphere Client (HTML5) contains a remote code execution vulnerability in a vCenter Server...CVE-2021-21972In KEVPublic exploitEPSS 99.9%9.8 Critical
- vmware cloud foundation, vcenter server, vcenter server and cloud foundation +2 moreThe vSphere Client (HTML5) contains an SSRF (Server Side Request Forgery) vulnerability due to...CVE-2021-21973In KEVPublic exploitEPSS 88.0%5.3 Medium
- pivotal software spring security, spring security, oracle communications element manager +5 more +7 morePrivilege escalation in spring securityCVE-2021-22112Fix available8.8 High
- vmware spring cloud netflix zuulIncorrect Authorization in Spring Cloud Netflix ZuulCVE-2021-22113Fix available5.3 Medium
- vmware vsphere replicationvSphere Replication 8.3.x prior to 8.3.1.2, 8.2.x prior to 8.2.1.1, 8.1.x prior to 8.1.2.3 and 6...CVE-2021-219767.2 High
- spring by vmware cloud task, vmware spring cloud task +1 morePossibility of SQL Injection in Spring Cloud Task Execution Sorting QueryCVE-2020-5428Fix available5.1 Medium
- spring cloud data flow, vmware spring cloud data flow +1 morePossibility of SQL Injection in Spring Cloud Data Flow Task Execution Sorting QueryCVE-2020-5427Fix available5.7 Medium
- vmware esxi, fusion, workstation +2 moreVMware ESXi (7.0 prior to ESXi70U1c-17325551), VMware Workstation (16.x prior to 16.0 and 15.x...CVE-2020-39996.5 Medium
- vmware carbon black cloudThe installer of the macOS Sensor for VMware Carbon Black Cloud prior to 3.5.1 handles certain...CVE-2020-40083.6 Low
- vmware sd-wan orchestratorThe SD-WAN Orchestrator 3.3.2 prior to 3.3.2 P3, 3.4.x prior to 3.4.4, and 4.0.x prior to 4.0.1...CVE-2020-4000EPSS 43.0%8.8 High
- vmware sd-wan orchestratorThe SD-WAN Orchestrator 3.3.2 prior to 3.3.2 P3 and 3.4.x prior to 3.4.4 allows an access to set...CVE-2020-39858.8 High
- vmware sd-wan orchestratorThe SD-WAN Orchestrator 3.3.2 prior to 3.3.2 P3 and 3.4.x prior to 3.4.4 does not apply correct...CVE-2020-3984EPSS 22.4%6.5 Medium
- vmware sd-wan orchestratorVMware SD-WAN Orchestrator 3.3.2 prior to 3.3.2 P3, 3.4.x prior to 3.4.4, and 4.0.x prior to 4.0...CVE-2020-40036.5 Medium
- vmware sd-wan orchestratorThe SD-WAN Orchestrator 3.3.2 prior to 3.3.2 P3, 3.4.x prior to 3.4.4, and 4.0.x prior to 4.0.1...CVE-2020-40027.2 High
- vmware sd-wan orchestratorThe SD-WAN Orchestrator 3.3.2, 3.4.x, and 4.0.x has default passwords allowing for a Pass-the...CVE-2020-40019.8 Critical
- vmware identity manager, identity manager connector, one access +3 more +5 moreVMware Workspace One Access, Access Connector, Identity Manager, and Identity Manager Connector...CVE-2020-4006In KEVEPSS 17.3%9.1 Critical
- vmware esxi, fusion, workstation +1 more +3 moreVMware ESXi (7.0 before ESXi70U1b-17168206, 6.7 before ESXi670-202011101-SG, 6.5 before ESXi650...CVE-2020-40048.2 High
- vmware esxi, cloud foundation +1 moreVMware ESXi (7.0 before ESXi70U1b-17168206, 6.7 before ESXi670-202011101-SG, 6.5 before ESXi650...CVE-2020-40057.8 High
- vmware pivotal schedulerScheduler for TAS can transmit privileged UAA token in plaintextCVE-2020-54268.6 High
- vmware tanzu single sign-on for vmware tanzu, vmware single sign-on for tanzu +1 moreUser Impersonation possible in Tanzu SSOCVE-2020-54257.5 High
- vmware horizon client, horizon client for windows +1 moreVMware Horizon Client for Windows (5.x prior to 5.5.0) contains an information disclosure...CVE-2020-39986.5 Medium
- vmware horizonVMware Horizon Server (7.x prior to 7.10.3 or 7.13.0) contains a Cross Site Scripting (XSS)...CVE-2020-39975.4 Medium
- vmware velerovelero-1.6.3-1.2 on GA mediaCVE-2020-3996Fix available5.5 Medium
- vmware esxi, fusion, workstation +2 more +4 moreIn VMware ESXi (6.7 before ESXi670-201908101-SG, 6.5 before ESXi650-202007101-SG), Workstation ...CVE-2020-39955.3 Medium
- vmware vcenter server, cloud foundation +1 moreVMware vCenter Server (6.7 before 6.7u3, 6.6 before 6.5u3k) contains a session hijack...CVE-2020-39947.4 High
- broadcom vmware nsx-t data center, vmware cloud foundation +1 moreVMware NSX-T (3.x before 3.0.2, 2.5.x before 2.5.2.2.0) contains a security vulnerability that...CVE-2020-39935.9 Medium
- vmware esxi, cloud foundation +1 moreOpenSLP as used in VMware ESXi (7.0 before ESXi_7.0.1-0.0.16850804, 6.7 before ESXi670-202010401...CVE-2020-3992In KEVPublic exploitEPSS 83.0%9.8 Critical
- vmware esxi, fusion, workstation +3 more +5 moreVMware ESXi (7.0 before ESXi_7.0.1-0.0.16850804, 6.7 before ESXi670-202008101-SG, 6.5 before...CVE-2020-39827.7 High
- vmware esxi, fusion, workstation +2 more +4 moreVMware ESXi (7.0 before ESXi_7.0.1-0.0.16850804, 6.7 before ESXi670-202008101-SG, 6.5 before...CVE-2020-39815.8 Medium
- vmware horizon client, horizon client for windows +1 moreVMware Horizon Client for Windows (5.x before 5.5.0) contains a denial-of-service vulnerability...CVE-2020-39917.1 High
- vmware horizon daasVMware Horizon DaaS (7.x and 8.x before 8.0.1 Update 1) contains a broken authentication...CVE-2020-39776.5 Medium
- spring by vmware framework, vmware spring framework, netapp oncommand insight +36 more +38 moreRFD Protection Bypass via jsessionidCVE-2020-5421Public exploitFix availableEPSS 11.6%8.7 High
- vmware horizon client, workstation player, workstation pro +2 moreVMware Workstation (15.x) and Horizon Client for Windows (5.x before 5.4.4) contain an...CVE-2020-39906.5 Medium
- vmware horizon client, workstation player, workstation pro +2 moreVMware Workstation (15.x) and Horizon Client for Windows (5.x before 5.4.4) contain a denial of...CVE-2020-39893.3 Low
- vmware horizon client, workstation player, workstation pro +2 moreVMware Workstation (15.x) and Horizon Client for Windows (5.x before 5.4.4) contain an out-of...CVE-2020-39886.1 Medium
- vmware horizon client, workstation player, workstation pro +2 moreVMware Workstation (15.x) and Horizon Client for Windows (5.x before 5.4.4) contain an out-of...CVE-2020-39876.1 Medium
- vmware horizon client, workstation player, workstation pro +2 moreVMware Workstation (15.x) and Horizon Client for Windows (5.x before 5.4.4) contain an out-of...CVE-2020-39866.1 Medium
- vmware fusionVMware Fusion (11.x) contains a privilege escalation vulnerability due to the way it allows...CVE-2020-39806.7 Medium
- vmware app volumesVMware App Volumes 2.x prior to 2.18.6 and VMware App Volumes 4 prior to 2006 contain a Stored...CVE-2020-39755.4 Medium
- vmware esxi, vcenter server, cloud foundation +2 moreVMware ESXi and vCenter Server contain a partial denial of service vulnerability in their...CVE-2020-39765.3 Medium
- spring by vmware cloud netflix, vmware spring cloud netflix +1 moreHystrix Dashboard Proxy In spring-cloud-netflix-hystrix-dashboardCVE-2020-5412Fix availableEPSS 10.2%6.5 Medium
- vmware operations manager, tanzu application service for vms, vmware tanzu application service for vms +2 more +4 moreApp Autoscaler logs credentialsCVE-2020-54145.7 Medium
- Show moreLoading…