Skip to contentVmware vulnerabilities
Products
Show 120 moreShow less
Newest
- vmware vrealize orchestrator, vrealize automation +1 moreVMware vRealize Orchestrator ((8.x prior to 8.6) contains an open redirect vulnerability due to...CVE-2021-220366.5 Medium
- vmware vrealize log insight, cloud foundation, vrealize suite lifecycle manager +2 moreVMware vRealize Log Insight (8.x prior to 8.6) contains a CSV(Comma Separated Value) injection...CVE-2021-220354.3 Medium
- vmware vrealize operations, cloud foundation, vrealize suite lifecycle manager +2 moreReleases prior to VMware vRealize Operations 8.6 contain a Server Side Request Forgery (SSRF)...CVE-2021-220332.7 Low
- vmware vcenter server, cloud foundation +1 moreThe vCenter Server contains a denial-of-service vulnerability in the Analytics service....CVE-2021-220205.5 Medium
- vmware vcenter server, cloud foundation +1 moreThe vCenter Server contains a denial-of-service vulnerability in VAPI (vCenter API) service. A...CVE-2021-220197.5 High
- vmware vcenter server, cloud foundation +1 moreThe vCenter Server contains an arbitrary file deletion vulnerability in a VMware vSphere Life...CVE-2021-220186.5 Medium
- vmware vcenter serverRhttproxy as used in vCenter Server contains a vulnerability due to improper implementation of...CVE-2021-22017In KEVEPSS 49.2%5.3 Medium
- vmware vcenter server, cloud foundation +1 moreThe vCenter Server contains a reflected cross-site scripting vulnerability due to a lack of input...CVE-2021-220166.1 Medium
- vmware vcenter server, cloud foundation +1 moreThe vCenter Server contains an authenticated code execution vulnerability in VAMI (Virtual...CVE-2021-220147.2 High
- vmware vcenter server, cloud foundation +1 moreThe vCenter Server contains a file path traversal vulnerability leading to information disclosure...CVE-2021-220137.5 High
- vmware vcenter server, cloud foundation +1 moreThe vCenter Server contains an information disclosure vulnerability due to an unauthenticated...CVE-2021-220127.5 High
- vmware vcenter server, cloud foundation +1 morevCenter Server contains an unauthenticated API endpoint vulnerability in vCenter Server Content...CVE-2021-220115.3 Medium
- vmware vcenter server, cloud foundation +1 moreThe vCenter Server contains a denial-of-service vulnerability in VPXD service. A malicious actor...CVE-2021-220107.5 High
- vmware vcenter server, cloud foundation +1 moreThe vCenter Server contains multiple denial-of-service vulnerabilities in VAPI (vCenter API)...CVE-2021-220097.5 High
- vmware vcenter server, cloud foundation +1 moreThe vCenter Server contains an information disclosure vulnerability in VAPI (vCenter API) service...CVE-2021-220087.5 High
- vmware vcenter server, cloud foundation +1 moreThe vCenter Server contains a local information disclosure vulnerability in the Analytics service...CVE-2021-220075.5 Medium
- vmware vcenter server, cloud foundation +1 moreThe vCenter Server contains a reverse proxy bypass vulnerability due to the way the endpoints...CVE-2021-22006Public exploit7.5 High
- vmware vcenter server, cloud foundation +1 moreThe vCenter Server contains an arbitrary file upload vulnerability in the Analytics service. A...CVE-2021-22005In KEVPublic exploitEPSS 100.0%9.8 Critical
- vmware vcenter server, cloud foundation +1 moreThe vCenter Server contains an SSRF (Server Side Request Forgery) vulnerability due to improper...CVE-2021-219936.5 Medium
- vmware vcenter server, cloud foundation +1 moreThe vCenter Server contains multiple local privilege escalation vulnerabilities due to improper...CVE-2021-22015Public exploit7.8 High
- vmware vcenter server, cloud foundation +1 moreThe vCenter Server contains a denial-of-service vulnerability due to improper XML entity parsing....CVE-2021-219926.5 Medium
- vmware vcenter server, cloud foundation +1 moreThe vCenter Server contains a local privilege escalation vulnerability due to the way it handles...CVE-2021-219917.8 High
- vmware fusion, workstation, esxi, workstation, and fusion +1 more +3 moreVMware ESXi (6.7 before ESXi670-202006401-SG and 6.5 before ESXi650-202005401-SG), Workstation ...CVE-2020-39608.4 High
- vmware identity manager, workspace one access, cloud foundation +1 more +3 moreVMware Workspace ONE Access and Identity Manager, unintentionally provide a login interface on...CVE-2021-220037.5 High
- vmware identity manager, workspace one access, cloud foundation +1 more +3 moreVMware Workspace ONE Access and Identity Manager, allow the /cfg web app and diagnostic endpoints...CVE-2021-220029.8 Critical
- vmware workspace one uem consoleVMware Workspace ONE UEM REST API contains a denial of service vulnerability. A malicious actor...CVE-2021-220297.5 High
- vmware vrealize log insight, cloud foundation +1 moreVMware vRealize Log Insight (8.x prior to 8.4) contains a Cross Site Scripting (XSS)...CVE-2021-220215.4 Medium
- vmware vrealize operations manager, cloud foundation, vrealize suite lifecycle manager +2 moreThe vRealize Operations Manager API (8.x prior to 8.5) contains a broken access control...CVE-2021-220257.5 High
- vmware vrealize operations manager, cloud foundation, vrealize suite lifecycle manager +2 moreThe vRealize Operations Manager API (8.x prior to 8.5) contains a Server Side Request Forgery in...CVE-2021-220277.5 High
- vmware vrealize operations manager, cloud foundation, vrealize suite lifecycle manager +2 moreThe vRealize Operations Manager API (8.x prior to 8.5) contains a Server Side Request Forgery in...CVE-2021-220267.5 High
- vmware vrealize operations manager, cloud foundation, vrealize suite lifecycle manager +2 moreThe vRealize Operations Manager API (8.x prior to 8.5) contains an arbitrary log-file read...CVE-2021-220247.5 High
- vmware vrealize operations manager, cloud foundation, vrealize suite lifecycle manager +2 moreThe vRealize Operations Manager API (8.x prior to 8.5) has insecure object reference...CVE-2021-220237.2 High
- vmware vrealize operations manager, cloud foundation, vrealize suite lifecycle manager +2 moreThe vRealize Operations Manager API (8.x prior to 8.5) contains an arbitrary file read...CVE-2021-220224.9 Medium
- vmware esxi, cloud foundation +1 moreOpenSLP as used in ESXi has a denial-of-service vulnerability due a heap out-of-bounds read issue...CVE-2021-219957.5 High
- vmware esxi, cloud foundation +1 moreSFCB (Small Footprint CIM Broker) as used in ESXi has an authentication bypass vulnerability. A...CVE-2021-21994Public exploit9.8 Critical
- vmware thinappVMware Thinapp version 5.x prior to 5.2.10 contain a DLL hijacking vulnerability due to insecure...CVE-2021-220007.8 High
- spring security, vmware spring security, oracle communications cloud native core policy +2 moreResource Exhaustion in Spring SecurityCVE-2021-22119Public exploitFix available7.5 High
- rabbitmq rabbitmq-server, vmware rabbitmq +1 moreImproper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) in RabbitMQ federation management pluginCVE-2021-32719Fix available3.1 Low
- rabbitmq rabbitmq-server, vmware rabbitmq +1 moreImproper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) in RabbitMQ management UICVE-2021-32718Fix available3.1 Low
- vmware app volumes, remote console, tools +2 moreVMware Tools for Windows (11.x.y prior to 11.2.6), VMware Remote Console for Windows (12.x prior...CVE-2021-219997.8 High
- vmware carbon black app controlVMware Carbon Black App Control 8.0, 8.1, 8.5 prior to 8.5.8, and 8.6 prior to 8.6.2 has an...CVE-2021-21998EPSS 10.6%9.8 Critical
- vmware tools, tools for windows +1 moreVMware Tools for Windows (11.x.y prior to 11.3.0) contains a denial-of-service vulnerability in...CVE-2021-219975.5 Medium
- vmware rabbitmq, debian linux +1 moreRabbitMQ all versions prior to 3.8.16 are prone to a denial of service vulnerability due to...CVE-2021-22116Fix available7.5 High
- vmware spring framework, netapp hci, management services for element software +29 more +31 moreImproper Privilege Management in Spring FrameworkCVE-2021-22118Fix available7.8 High
- vmware vcenter server, cloud foundation +1 moreThe vSphere Client (HTML5) contains a vulnerability in a vSphere authentication mechanism for the...CVE-2021-21986EPSS 13.3%9.8 Critical
- vmware vcenter server, cloud foundation +1 moreThe vSphere Client (HTML5) contains a remote code execution vulnerability due to lack of input...CVE-2021-21985In KEVPublic exploitEPSS 100.0%9.8 Critical
- vmware horizon client, workstation +1 moreVMware Workstation (16.x prior to 16.1.2) and Horizon Client for Windows (5.x prior to 5.5.2)...CVE-2021-219896.5 Medium
- vmware horizon client, workstation +1 moreVMware Workstation (16.x prior to 16.1.2) and Horizon Client for Windows (5.x prior to 5.5.2)...CVE-2021-219886.5 Medium
- vmware horizon client, workstation +1 moreVMware Workstation (16.x prior to 16.1.2) and Horizon Client for Windows (5.x prior to 5.5.2)...CVE-2021-219876.5 Medium
- vmware workspace one unified endpoint managementVMware Workspace one UEM console (2102 prior to 21.2.0.8, 2101 prior to 21.1.0.14, 2011 prior to...CVE-2021-219906.1 Medium
- Show moreLoading…