Skip to contentVmware vulnerabilities
Products
Show 120 moreShow less
Newest
- vmware vcloud directorAn authenticated, high privileged malicious actor with network access to the VMware Cloud...CVE-2022-229667.2 High
- vmware identity manager, vrealize automation, workspace one access +2 more +4 moreVMware Workspace ONE Access, Identity Manager and vRealize Automation contain two remote code...CVE-2022-229587.2 High
- vmware workspace one access, identity manager, vrealize automation +2 moreVMware Workspace ONE Access has two authentication bypass vulnerabilities (CVE-2022-22955 & CVE...CVE-2022-229559.8 Critical
- vmware identity manager, vrealize automation, workspace one access +2 more +4 moreVMware Workspace ONE Access, Identity Manager and vRealize Automation contain an information...CVE-2022-229615.3 Medium
- vmware identity manager, vrealize automation, workspace one access +2 more +4 moreVMware Workspace ONE Access, Identity Manager and vRealize Automation contain a cross site...CVE-2022-229594.3 Medium
- vmware identity manager, vrealize automation, workspace one access +3 more +5 moreVMware Workspace ONE Access, Identity Manager and vRealize Automation contain a privilege...CVE-2022-22960In KEVPublic exploitEPSS 35.5%7.8 High
- vmware identity manager, vrealize automation, workspace one access +2 more +4 moreVMware Workspace ONE Access, Identity Manager and vRealize Automation contain two remote code...CVE-2022-22957Public exploitEPSS 23.3%7.2 High
- vmware workspace one access, identity manager, vrealize automation +2 moreVMware Workspace ONE Access has two authentication bypass vulnerabilities (CVE-2022-22955 & CVE...CVE-2022-22956Public exploitEPSS 49.5%9.8 Critical
- vmware horizon, horizon agent for linux +1 moreVMware Horizon Client for Linux (prior to 22.x) contains a local privilege escalation that allows...CVE-2022-229647.8 High
- vmware horizon, horizon agent for linux +1 moreVMware Horizon Client for Linux (prior to 22.x) contains a local privilege escalation as a user...CVE-2022-229627.8 High
- vmware identity manager, workspace one access and identity manager, workspace one access +3 more +5 moreVMware Workspace ONE Access and Identity Manager contain a remote code execution vulnerability...CVE-2022-22954In KEVPublic exploitEPSS 100.0%9.8 Critical
- vmware photon osThe SchedulerServer in Vmware photon allows remote attackers to inject logs through \r in the...CVE-2021-220555.3 Medium
- vmware spring frameworkAllocation of Resources Without Limits or Throttling in Spring FrameworkCVE-2022-22950Fix availableEPSS 36.9%6.5 Medium
- vmware spring cloud function, vmware tanzu spring cloud, oracle banking branch +26 more +28 moreSpring Cloud Function Code Injection with a specially crafted SpEL as a routing expressionCVE-2022-22963In KEVPublic exploitFix availableEPSS 99.9%9.8 Critical
- vmware spring framework, cisco cx cloud agent, oracle commerce platform +35 more +37 moreRemote Code Execution in Spring FrameworkCVE-2022-22965In KEVPublic exploitFix availableEPSS 99.6%9.8 Critical
- vmware spring bootTemporary Directory Hijacking to Local Privilege Escalation Vulnerability in org.springframework.boot:spring-bootCVE-2022-27772Public exploitFix available7.8 High
- vmware vcenter server, cloud foundation +1 moreThe vCenter Server contains an information disclosure vulnerability due to improper permission of...CVE-2022-22948In KEVPublic exploitEPSS 13.3%6.5 Medium
- vmware carbon black app controlVMware Carbon Black App Control (8.5.x prior to 8.5.14, 8.6.x prior to 8.6.6, 8.7.x prior to 8.7...CVE-2022-229529.1 Critical
- vmware carbon black app controlVMware Carbon Black App Control (8.5.x prior to 8.5.14, 8.6.x prior to 8.6.6, 8.7.x prior to 8.7...CVE-2022-22951EPSS 20.3%9.1 Critical
- vmware spring cloud gateway, oracle commerce guided search, communications cloud native core binding support function +3 more +5 moreIn spring cloud gateway versions prior to 3.1.1+ , applications that are configured to enable...CVE-2022-229465.5 Medium
- vmware tools, tools for windows +1 moreVMware Tools for Windows (11.x.y and 10.x.y prior to 12.0.0) contains an uncontrolled search path...CVE-2022-229436.7 Medium
- vmware spring cloud gateway, oracle commerce guided search, communications cloud native core binding support function +7 more +9 moreSpring Cloud Gateway vulnerable to Code Injection when Gateway Actuator endpoint enabled, exposed, unsecuredCVE-2022-22947In KEVPublic exploitFix availableEPSS 98.3%10.0 Critical
- vmware workspace one boxerVMware Workspace ONE Boxer contains a stored cross-site scripting (XSS) vulnerability. Due to...CVE-2022-229445.4 Medium
- vmware cloud foundation, nsx data center +1 moreVMware NSX Edge contains a CLI shell injection vulnerability. A malicious actor with SSH access...CVE-2022-229457.8 High
- vmware esxi, cloud foundation +1 moreESXi contains a slow HTTP POST denial-of-service vulnerability in rhttpproxy. A malicious actor...CVE-2021-220507.5 High
- vmware esxi, fusion +1 moreVMware ESXi contains a TOCTOU (Time-of-check Time-of-use) vulnerability that exists in the way...CVE-2021-220437.5 High
- vmware esxi, cloud foundation +1 moreVMware ESXi contains an unauthorized access vulnerability due to VMX having access to settingsd...CVE-2021-220427.8 High
- vmware esxi, fusion, workstation +1 more +3 moreVMware ESXi, Workstation, and Fusion contain a double-fetch vulnerability in the UHCI USB...CVE-2021-220416.7 Medium
- vmware esxi, fusion, cloud foundation +2 more +4 moreVMware ESXi, Workstation, and Fusion contain a use-after-free vulnerability in the XHCI USB...CVE-2021-220406.7 Medium
- vmware cloud foundationVMware Cloud Foundation contains an information disclosure vulnerability due to logging of...CVE-2022-229394.9 Medium
- vmware horizon, workstation +1 moreVMware Workstation (16.x prior to 16.2.2) and Horizon Client for Windows (5.x prior to 5.5.3)...CVE-2022-229386.5 Medium
- vmware photon osThe vmwgfx driver contains a local privilege escalation vulnerability that allows unprivileged...CVE-2022-22942Public exploitFix available7.8 High
- vmware spring framework, oracle communications cloud native core console, communications cloud native core service communication proxy +2 moreLog entry injection in Spring FrameworkCVE-2021-22060Fix available4.3 Medium
- vmware esxi, fusion, workstation +1 more +3 moreVMware ESXi (7.0, 6.7 before ESXi670-202111101-SG and 6.5 before ESXi650-202110101-SG), VMware...CVE-2021-220457.8 High
- vmware identity manager, workspace one access, vrealize automation +2 moreVMware Workspace ONE Access 21.08, 20.10.0.1, and 20.10 and Identity Manager 3.3.5, 3.3.4, and 3...CVE-2021-220567.5 High
- vmware workspace one accessVMware Workspace ONE Access 21.08, 20.10.0.1, and 20.10 contain an authentication bypass...CVE-2021-220578.8 High
- omnissa workspace one uem, vmware workspace one uem console +1 moreVMware Workspace ONE UEM console 20.0.8 prior to 20.0.8.37, 20.11.0 prior to 20.11.0.40, 21.2.0...CVE-2021-22054In KEVPublic exploitEPSS 99.7%7.5 High
- spring amqp, vmware spring advanced message queuing protocol +1 moreDeserialization of Untrusted Data in Spring AMQPCVE-2021-22095Fix available6.5 Medium
- vmware vcenter serverThe vSphere Web Client (FLEX/Flash) contains an SSRF (Server Side Request Forgery) vulnerability...CVE-2021-220499.8 Critical
- vmware vcenter server, cloud foundation +1 moreThe vSphere Web Client (FLEX/Flash) contains an unauthorized arbitrary file read vulnerability. A...CVE-2021-21980Public exploit7.5 High
- spring by vmware cloud netflix, vmware spring cloud netflix +1 moreCode injection in spring-cloud-netflix-hystrix-dashboardCVE-2021-22053Public exploitFix availableEPSS 13.2%8.8 High
- vmware vcenter server, cloud foundation +1 moreThe vCenter Server contains a privilege escalation vulnerability in the IWA (Integrated Windows...CVE-2021-22048EPSS 10.3%8.8 High
- vmware spring cloud gatewayRequest injection in Spring Cloud GatewayCVE-2021-22051Fix available6.5 Medium
- vmware installbuilderUnder certain circumstances, when manipulating the Windows registry, InstallBuilder uses the reg...CVE-2021-220377.8 High
- vmware installbuilderOn Windows, the uninstaller binary copies itself to a fixed temporary location, which is then...CVE-2021-220388.8 High
- spring amqp, vmware spring advanced message queuing protocol +1 moreDeserialization of Untrusted Data in Spring AMQPCVE-2021-22097Fix available6.5 Medium
- vmware spring framework, netapp active iq unified manager, management services for element software and netapp hci +5 more +7 moreImproper Output Neutralization for Logs in Spring FrameworkCVE-2021-22096Fix available4.3 Medium
- vmware spring data restExposure of Resource to Wrong Sphere in Spring Data RESTCVE-2021-22047Fix available5.3 Medium
- vmware spring cloud openfeignExposure of Resource to Wrong Sphere in Spring Cloud OpenFeignCVE-2021-22044Fix available7.5 High
- vmware vrealize operations tenantReleases prior to VMware vRealize Operations Tenant App 8.6 contain an Information Disclosure...CVE-2021-220347.5 High
- Show moreLoading…