Skip to contentVmware vulnerabilities
Products
Show 120 moreShow less
Newest
- salt project saltCVE-2025-22239 salt advisoryCVE-2025-22239Fix available8.1 High
- salt project saltCVE-2025-22238 salt advisoryCVE-2025-22238Fix available4.2 Medium
- salt project saltCVE-2025-22237 salt advisoryCVE-2025-22237Fix available6.7 Medium
- salt project saltCVE-2025-22236 salt advisoryCVE-2025-22236Fix available8.1 High
- salt project saltCVE-2024-38825 Salt AdvisoryCVE-2024-38825Fix available6.4 Medium
- salt project saltCVE-2024-38823 Salt AdvisoryCVE-2024-388232.7 Low
- salt project saltCVE-2024-38822 Salt AdvisoryCVE-2024-388222.7 Low
- vmware avi load balancerDescription:
VMware AVI Load Balancer contains an authenticated blind SQL Injection...CVE-2025-412336.8 Medium
- vmware spring frameworkRFD Attack via “Content-Disposition” Header Sourced from RequestCVE-2025-41234Fix available6.5 Medium
- broadcom vmware nsx, vmware nsx, cloud foundation +2 more +4 moreVMware NSX contains a stored Cross-Site Scripting (XSS) vulnerability in the router port due to...CVE-2025-222455.9 Medium
- broadcom vmware nsx, vmware nsx, cloud foundation +2 more +4 moreVMware NSX contains a stored Cross-Site Scripting (XSS) vulnerability in the gateway firewall due...CVE-2025-222446.9 Medium
- broadcom vmware nsx, vmware nsx, cloud foundation +2 more +4 moreVMware NSX Manager UI is vulnerable to a stored Cross-Site Scripting (XSS) attack due to improper...CVE-2025-222437.5 High
- vmware spring cloud gateway, spring cloud gateway server mvc +1 moreCVE-2025-41235: Spring Cloud Gateway Server Forwards Headers from Untrusted ProxiesCVE-2025-41235Fix available8.6 High
- vmware esxi, vcenter server, cloud foundation +2 more +4 moreVMware ESXi and vCenter Server Reflected Cross Site Scripting (XSS) VulnerabilityCVE-2025-41228Public exploit4.3 Medium
- vmware esxi, fusion, workstation +3 more +5 moreDenial-of-Service VulnerabilityCVE-2025-412275.5 Medium
- vmware esxi, cloud foundation, telco cloud infrastructure +1 more +3 moreGuest Operations Denial-of-Service VulnerabilityCVE-2025-412266.8 Medium
- vmware vcenter server, cloud foundation, telco cloud infrastructure +1 more +3 moreVMware vCenter Server authenticated command-execution vulnerabilityCVE-2025-412258.8 High
- vmware cloud foundationVMware Cloud Foundation Missing Authorisation VulnerabilityCVE-2025-412317.3 High
- vmware cloud foundationVMware Cloud Foundation Information Disclosure VulnerabilityCVE-2025-412307.5 High
- vmware cloud foundationVMware Cloud Foundation Directory Traversal VulnerabilityCVE-2025-412298.2 High
- spring framework, vmware spring framework +1 moreSpring Framework DataBinder Case Sensitive Match ExceptionCVE-2025-22233Fix available3.1 Low
- broadcom bitnami, bitnami\/pgpool +1 more[pgpool] Unauthenticated access to postgres through pgpoolCVE-2025-22248Fix available9.4 Critical
- vmware aria automation, cloud foundation, telco cloud platform +2 moreVMSA-2025-0008: VMware Aria automation updates address a DOM based Cross-site scripting vulnerability (CVE-2025-22249)CVE-2025-222498.2 High
- vmware aria operationsVMware Aria Operations updates address a local privilege escalation vulnerability (CVE-2025-22231)CVE-2025-222317.8 High
- agency dominion inc. fusionWordPress Fusion plugin <= 1.6.4 - Cross Site Scripting (XSS) vulnerabilityCVE-2025-315496.5 Medium
- vmware esxi, esxi, workstation, and fusion, fusion +4 more +6 moreVMware ESXi, Workstation, and Fusion contain an information disclosure vulnerability due to an...CVE-2025-22226In KEV7.1 High
- vmware esxi, cloud foundation, telco cloud infrastructure +1 more +3 moreVMware ESXi contains an arbitrary write vulnerability. A malicious actor with privileges within...CVE-2025-22225In KEV8.2 High
- vmware esxi, workstation, cloud foundation +3 more +5 moreVMware ESXi, and Workstation contain a TOCTOU (Time-of-Check Time-of-Use) vulnerability that...CVE-2025-22224In KEV9.3 Critical
- vmware aria operations, cloud foundation +1 moreVMware Aria Operations information disclosure vulnerability (CVE-2025-22222)CVE-2025-222227.7 High
- vmware aria operations for logs, cloud foundation +1 moreVMware Aria Operations for Logs stored cross-site scripting vulnerability (CVE-2025-22221)CVE-2025-222215.2 Medium
- vmware aria operations for logs, cloud foundation +1 moreVMware Aria Operations for Logs broken access control vulnerability (CVE-2025-22220)CVE-2025-222204.3 Medium
- vmware aria operations for logs, cloud foundation +1 moreVMware Aria Operations for Logs stored cross-site scripting vulnerability (CVE-2025-22219)CVE-2025-222196.8 Medium
- vmware aria operations for logs, cloud foundation +1 moreVMware Aria Operations for Logs information disclosure vulnerabilityCVE-2025-222188.5 High
- ibm fusion, fusion hci, fusion hci for watsonx +3 more +5 moreIBM Fusion improper communication restrictionCVE-2024-223154.0 Medium
- vmware aria automation, cloud foundation (vmware aria automation) +1 moreVMSA-2025-0001: VMware Aria automation update addresses a server side request forgery vulnerability (CVE-2025-22215)CVE-2025-222154.3 Medium
- vmware spring frameworkSpring Framework Path Traversal vulnerabilityCVE-2024-38819Public exploitFix availableEPSS 56.5%7.5 High
- agency dominion inc. fusionWordPress Fusion Page Builder plugin <= 1.6.1 - Cross Site Scripting (XSS) vulnerabilityCVE-2024-379626.5 Medium
- vmware aria operations, cloud foundation +1 moreStored cross-site scripting vulnerability (CVE-2024-38834)CVE-2024-388346.5 Medium
- vmware aria operations, cloud foundation +1 moreStored cross-site scripting vulnerability (CVE-2024-38833)CVE-2024-388336.8 Medium
- vmware aria operations, cloud foundation +1 moreStored cross-site scripting vulnerability (CVE-2024-38832)CVE-2024-388327.1 High
- vmware aria operations, cloud foundation +1 moreLocal privilege escalation vulnerability (CVE-2024-38831)CVE-2024-388317.8 High
- vmware aria operations, cloud foundation +1 moreLocal privilege escalation vulnerabilityCVE-2024-388307.8 High
- springCVE-2024-38828: DoS via Spring MVC controller method with byte[] parameterCVE-2024-38828Public exploitFix available5.3 Medium
- spring, spring webflux +1 moreAuthorization Bypass of Static Resources in WebFlux ApplicationsCVE-2024-38821Public exploitFix available9.1 Critical
- vmware spring, spring framework +1 moreCVE-2024-38820: Spring Framework DataBinder Case Sensitive Match ExceptionCVE-2024-38820Public exploitFix available3.1 Low
- vmware hcxAn authenticated SQL injection vulnerability in VMware HCX was privately reported to VMware. A
...CVE-2024-38814EPSS 15.4%8.8 High
- vmware nsx, cloud foundation, nsx-t +2 moreVMware NSX contains a content spoofing vulnerability.
An unauthenticated malicious actor may be...CVE-2024-388154.3 Medium
- vmware nsx, cloud foundation, nsx-t +2 moreVMware NSX contains a local privilege escalation vulnerability.
An authenticated malicious...CVE-2024-388186.7 Medium
- vmware nsx, cloud foundation, nsx-t +2 moreMware NSX contains a command injection vulnerability.
A malicious actor with access to the NSX...CVE-2024-388176.7 Medium
- vmware spring frameworkSpring Framework DoS via conditional HTTP requestCVE-2024-38809Fix available5.3 Medium
- Show moreLoading…