Skip to contentVmware vulnerabilities
Products
Show 120 moreShow less
Newest
- spring security, vmware spring security +1 moreSpring Security's spring-security.xsd file is world writableCVE-2023-34042Fix available4.1 Medium
- spring cloud contract, vmware spring cloud contract +1 moreSpring Cloud Contract vulnerable to local information disclosureCVE-2024-22236Fix available3.3 Low
- spring framework, vmware spring framework +1 moreCVE-2024-22233: Spring Framework server Web DoS VulnerabilityCVE-2024-22233Fix available7.5 High
- vmware aria automation, cloud foundation +1 moreAria Automation contains a Missing Access Control vulnerability.
An authenticated malicious...CVE-2023-340639.9 Critical
- vmware workspace one launcherPrivilege Escalation VulnerabilityCVE-2023-340644.6 Medium
- spring boot, vmware spring boot +1 moreSpring Boot server Web Observations DoS VulnerabilityCVE-2023-34055Fix available5.3 Medium
- broadcom reactor nettyReactor Netty HTTP Server Metrics DoS VulnerabilityCVE-2023-34054Fix available5.3 Medium
- spring framework, vmware spring framework +1 moreSpring Framework server Web Observations DoS VulnerabilityCVE-2023-34053Fix available5.3 Medium
- broadcom reactor netty, reactor netty netty +1 moreIn Reactor Netty HTTP Server a malicious user can send a request using a specially crafted URL that can lead to a directory traversal attackCVE-2023-34062Fix available7.5 High
- vmware cloud directorVMware Cloud Director Appliance contains an authentication bypass vulnerability in case VMware...CVE-2023-340609.8 Critical
- vmware workspace one uemVMware Workspace ONE UEM console contains an open redirect vulnerability.
A malicious actor may...CVE-2023-208868.8 High
- vmware toolsVMware Tools contains a local privilege escalation vulnerability. A malicious actor with local...CVE-2023-340577.8 High
- microsoft open-vm-tools, debian linux, vmware open vm tools +2 moreopen-vm-tools contains a file descriptor hijack vulnerability in the vmware-user-suid-wrapper. A...CVE-2023-34059Fix available7.4 High
- vmware tools, debian linux, fedoraproject fedora +2 more +4 moreVMware Tools contains a SAML token signature bypass vulnerability. A malicious actor that has...CVE-2023-34058Fix available7.1 High
- vmware vcenter server, cloud foundation (vmware vcenter server) +1 moreVMware vCenter Server Partial Information Disclosure VulnerabilityCVE-2023-340564.3 Medium
- vmware vcenter server, cloud foundation, cloud foundation (vmware vcenter server) +2 moreVMware vCenter Server Out-of-Bounds Write VulnerabilityCVE-2023-34048In KEVEPSS 99.2%9.8 Critical
- vmware rabbitmq, rabbitmq rabbitmq-server +1 moreDenial of Service by publishing large messages over the HTTP APICVE-2023-46118Fix available4.9 Medium
- vmware rabbitmq java client, rabbitmq rabbitmq-java-client +1 moreRabbitMQ Java client's lack of message size limitation leads to remote DoS attackCVE-2023-46120Fix available4.9 Medium
- vmware fusionVMware Fusion installer local privilege escalationCVE-2023-340456.6 Medium
- vmware fusionVMware Fusion TOCTOU local privilege escalation vulnerabilityCVE-2023-340466.7 Medium
- vmware fusion, workstation +1 moreInformation disclosure vulnerability in bluetooth device-sharing functionalityCVE-2023-340447.1 High
- vmware aria operations for logsVMware Aria Operations for Logs contains an authentication bypass vulnerability. An...CVE-2023-34051Public exploitEPSS 48.1%9.8 Critical
- vmware aria operations for logsVMware Aria Operations for Logs contains a deserialization vulnerability. A malicious actor with...CVE-2023-340527.8 High
- spring amqp, vmware spring advanced message queuing protocol +1 moreSpring AMQP Deserialization VulnerabilityCVE-2023-34050Public exploit5.0 Medium
- vmware aria operations, cloud foundation +1 moreVMware Aria Operations contains a local privilege escalation vulnerability. A malicious actor...CVE-2023-340436.7 Medium
- spring for graphql, vmware spring for graphql +1 moreExposure of data and identity to wrong session in Spring for GraphQLCVE-2023-34047Fix available3.1 Low
- vmware tools, debian linux, fedoraproject fedora +2 more +4 moreVMware Tools contains a SAML token signature bypass vulnerability. A malicious actor with man-in...CVE-2023-20900Fix available7.1 High
- vmware aria operations for networksAria Operations for Networks contains an arbitrary file write vulnerability. An authenticated...CVE-2023-20890EPSS 20.2%7.2 High
- vmware aria operations for networksAria Operations for Networks contains an Authentication Bypass vulnerability due to a lack of...CVE-2023-34039Public exploitEPSS 67.2%9.8 Critical
- spring for apache kafka, vmware spring for apache kafka +1 moreJava Deserialization vulnerability in Spring-Kafka When Improperly ConfiguredCVE-2023-34040Public exploitFix available5.3 Medium
- vmware horizon clientVMware Horizon Server contains an information disclosure vulnerability. A malicious actor with...CVE-2023-340385.3 Medium
- vmware horizon clientVMware Horizon Server contains a HTTP request smuggling vulnerability. A malicious actor with...CVE-2023-340375.3 Medium
- vmware isolation segment, tanzu application service for vms, tanzu application service for virtual machines +2 moreVMware Tanzu Application Service for VMs and Isolation Segment information disclosure vulnerabilityCVE-2023-208916.5 Medium
- spring security, vmware spring security +1 moreAccess Control Bypass in Spring SecurityCVE-2023-34034Public exploitFix available9.1 Critical
- spring security, vmware spring security +1 moreSpring Security's authorization rules can be misconfigured when using multiple servletsCVE-2023-34035Public exploitFix available7.3 High
- spring hateoas, vmware spring hateoas +1 moreForwarded header exploit with Spring HATEOAS on WebFluxCVE-2023-34036Fix available5.3 Medium
- vmware sd-wan edge, sd-wan edge firmware +1 moreVMware SD-WAN (Edge) contains a bypass authentication vulnerability. An unauthenticated attacker...CVE-2023-208997.5 High
- vmware vcenter server, cloud foundation (vcenter server), vcenter server (vcenter server) +2 moreThe VMware vCenter Server contains an out-of-bounds read vulnerability in the implementation of...CVE-2023-208965.9 Medium
- vmware vcenter server, cloud foundation (vcenter server), vcenter server (vcenter server) +2 moreThe VMware vCenter Server contains a memory corruption vulnerability in the implementation of the...CVE-2023-208958.1 High
- vmware vcenter server, cloud foundation (vcenter server), vcenter server (vcenter server) +2 moreThe VMware vCenter Server contains an out-of-bounds write vulnerability in the implementation of...CVE-2023-20894EPSS 33.9%8.1 High
- vmware vcenter server, cloud foundation (vcenter server), vcenter server (vcenter server) +2 moreThe VMware vCenter Server contains a use-after-free vulnerability in the implementation of the...CVE-2023-208938.1 High
- vmware vcenter server, cloud foundation (vcenter server), vcenter server (vcenter server) +2 moreVMware vCenter Server heap-overflow vulnerabilityCVE-2023-208928.1 High
- vmware tools, debian linux, fedoraproject fedora +2 moreVMware Tools Authentication Bypass VulnerabilityCVE-2023-20867In KEVFix availableEPSS 13.6%3.9 Low
- vmware vrealize network insightAria Operations for Networks contains an information disclosure vulnerability. A malicious actor...CVE-2023-20889EPSS 79.1%7.5 High
- vmware vrealize network insightAria Operations for Networks contains an authenticated deserialization vulnerability. A malicious...CVE-2023-20888EPSS 82.3%8.8 High
- vmware aria operations for networksAria Operations for Networks contains a command injection vulnerability. A malicious actor with...CVE-2023-20887In KEVPublic exploitEPSS 98.3%9.8 Critical
- vmware toolsVMware Tools for Windows (12.x.y prior to 12.1.5, 11.x.y and 10.x.y) contains a denial-of-service...CVE-2022-316935.5 Medium
- vmware identity manager, workspace one access, cloud foundation +1 more +3 moreVMware Workspace ONE Access and VMware Identity Manager contain an insecure redirect...CVE-2023-208846.1 Medium
- spring boot, vmware spring boot +1 moreSpring Boot Welcome Page Denial of ServiceCVE-2023-20883Fix available7.5 High
- vmware nsx-t, broadcom vmware nsx-t data center +1 moreNSX-T contains a reflected cross-site scripting vulnerability due to a lack of input validation....CVE-2023-208686.1 Medium
- Show moreLoading…