Skip to contentVmware vulnerabilities
Products
Show 120 moreShow less
Newest
- spring ai, vmware spring ai +1 moreSpEL Injection via Unescaped Filter Key in SimpleVectorStore Leads to Remote Code ExecutionCVE-2026-22738Public exploitFix available9.8 Critical
- spring cloud, vmware spring cloud config +1 moreSpring Cloud Config Profile Substitution Can Allow Unintended Access To Files And Enable SSRF AttacksCVE-2026-22739Fix available8.6 High
- spring framework, vmware spring framework +1 moreSpring Framework Improper Path Limitation with Script View TemplatesCVE-2026-22737Fix available5.9 Medium
- spring foundation, vmware spring framework +1 moreServer Sent Event stream corruptionCVE-2026-22735Fix available2.6 Low
- spring security, vmware spring boot +1 moreAuthentication Bypass under Actuator CloudFoundry endpointsCVE-2026-22733Fix available8.2 High
- spring security, vmware spring security +1 moreUnder Some Conditions Spring Security HTTP Headers Are not WrittenCVE-2026-22732Public exploitFix available9.1 Critical
- spring boot, vmware spring boot +1 moreAuthentication Bypass under Actuator Health groups pathsCVE-2026-22731Fix available8.2 High
- vmware spring aiCVE-2026-22729: JSONPath Injection in Spring AI Vector Stores FilterExpressionConverterCVE-2026-22729Fix available8.6 High
- vmware spring aiCVE-2026-22730: SQL Injection in Spring AI MariaDBFilterExpressionConverterCVE-2026-22730Public exploitFix available8.8 High
- vmware workstationVMware Workstation out-of-bound read vulnerabilityCVE-2026-227172.7 Low
- vmware workstationVMware Workstation out-of-bounds write vulnerabilityCVE-2026-227165.0 Medium
- vmware workstationVMware Workstation for Windows null pointer dereference may allow an authenticated user to trigger a crashCVE-2026-22722Public exploit6.1 Medium
- vmware fusion, workstation +1 moreVMware Workstation/Fusion NAT vulnerabilityCVE-2026-227155.9 Medium
- vmware aria operations, cloud foundation, telco cloud infrastructure +1 more +3 moreVMware Aria Operations privilege escalation vulnerabilityCVE-2026-227216.2 Medium
- vmware aria operations, cloud foundation, telco cloud infrastructure +2 more +4 moreVMware Aria Operations stored cross-site scripting vulnerabilityCVE-2026-227208.0 High
- broadcom vmware aria operations, vmware aria operations, cloud foundation +3 more +5 moreVMware Aria Operations command injection vulnerabilityCVE-2026-22719In KEVEPSS 18.3%8.1 High
- vmware spring data geode, red hat fuse 7, vmware spring data gemfire +2 moreZip Slip Path Traversal in Snapshot Archive Extraction (Windows-Specific)CVE-2026-28188.2 High
- vmware spring data geode, spring data gemfire +1 moreSpring Data Geode Insecure Temporary Directory UsageCVE-2026-28174.8 Medium
- autodesk fusionStored XSS in Electronic Library Component DescriptionCVE-2026-05358.1 High
- autodesk fusionStored XSS in the value of a part attributeCVE-2026-05348.1 High
- autodesk fusionStored XSS in Fusion desktop when attempting to delete a fileCVE-2026-05338.1 High
- nagios fusionNagios Fusion < 4.0.1 XSS via Users/Servers PageCVE-2017-202095.1 Medium
- nagios fusionNagios Fusion < 4.1.5 XSS via fusionwindow ParameterCVE-2018-251195.1 Medium
- nagios fusionNagios Fusion < 4.2.0 License Information Reflected XSSCVE-2023-536896.0 Medium
- nagios fusionNagios Fusion < 4.2.0 LDAP/AD Integration Stored XSSCVE-2023-536906.2 Medium
- nagios fusionNagios Fusion < 4.2.0 Email Settings Stored XSS via SMTP/sendmailCVE-2023-73126.2 Medium
- vmware spring frameworkSpring Framework STOMP CSRF VulnerabilityCVE-2025-41254Fix available4.3 Medium
- vmware spring cloud gateway server webfluxSpring Cloud Gateway Webflux SpEL Injection Vulnerability Allowing Exposure of Environment VariablesCVE-2025-41253Fix available7.5 High
- vmware nsxUsername enumeration vulnerabilityCVE-2025-412527.5 High
- vmware nsxWeak password recovery vulnerabilityCVE-2025-412518.1 High
- vmware vcenter, cloud foundation, telco cloud infrastructure +2 more +4 moreHeader injection vulnerabilityCVE-2025-412508.5 High
- vmware aria operations, cloud foundation, telco cloud infrastructure +1 more +3 moreVMSA-2025-0015: VMware Aria Operations and VMware Tools updates address multiple vulnerabilities (CVE-2025-41244,CVE-2025-41245, CVE-2025-41246)CVE-2025-412454.9 Medium
- vmware toolsImproper authorisation vulnerabilityCVE-2025-412467.6 High
- broadcom vmware aria operations and vmware tools, vmware aria operations, tools +7 more +9 moreVMSA-2025-0015: VMware Aria Operations and VMware Tools updates address multiple vulnerabilities (CVE-2025-41244,CVE-2025-41245, CVE-2025-41246)CVE-2025-41244In KEVPublic exploitFix availableEPSS 16.4%7.8 High
- autodesk fusionHTML Payload Stored Cross-Site Scripting (XSS) VulnerabilityCVE-2025-102448.7 High
- vmware spring frameworkCVE-2025-41249: Spring Framework Annotation Detection VulnerabilityCVE-2025-41249Public exploitFix available7.5 High
- spring security, vmware spring security +1 moreCVE-2025-41248: Spring Security authorization bypass for method security annotations on parameterized typesCVE-2025-41248Fix available7.5 High
- ibm fusion, fusion hci, fusion hci for watsonx +3 more +5 moreIBM Fusion insecure default configurationCVE-2025-362228.7 High
- vmware spring frameworkCVE-2025-41242: Path traversal vulnerability on non-compliant Servlet containersCVE-2025-41242Public exploitFix available5.9 Medium
- vmware vcenter, cloud foundation, telco cloud infrastructure +1 more +3 moreDenial-of-service vulnerabilityCVE-2025-412414.4 Medium
- vmware bitnamicharts/appsmith, bitnamicharts/drupal, bitnamicharts/wordpress +2 moreMounted Kubernetes Secrets under a predictable path located within the web server document rootCVE-2025-41240Fix available10.0 Critical
- vmware reactor nettyCVE-2025-22227: Authentication Leak On Redirect With Reactor Netty HTTP ClientCVE-2025-22227Fix available6.1 Medium
- vmware esxi, fusion, tools +4 more +6 morevSockets information-disclosure vulnerabilityCVE-2025-412397.1 High
- vmware esxi, fusion, workstation +3 more +5 morePVSCSI heap-overflow vulnerabilityCVE-2025-412389.3 Critical
- vmware esxi, fusion, workstation +4 more +6 moreVMCI integer-underflow vulnerabilityCVE-2025-412379.3 Critical
- vmware esxi, fusion, workstation +3 more +5 moreVMXNET3 integer-overflow vulnerabilityCVE-2025-412369.3 Critical
- salt project saltCVE-2024-38824 salt advisoryCVE-2024-38824Fix available9.6 Critical
- salt project saltCVE-2025-22242 salt advisoryCVE-2025-22242Fix available5.6 Medium
- salt project saltCVE-2025-22241 salt advisoryCVE-2025-22241Fix available5.6 Medium
- salt project saltCVE-2025-22240 salt advisoryCVE-2025-22240Fix available6.3 Medium
- Show moreLoading…