vmware

950 tracked vulnerabilities.

CVE-2023-34063 CRITICAL
Aria Automation - Privilege Escalation
Jan 16, 2024
CVSS 9.9
EPSS 0.00
CVE-2023-34064 MEDIUM
Workspace ONE Launcher - Privilege Escalation
Dec 12, 2023
CVSS 4.6
EPSS 0.00
CVE-2023-34055 MEDIUM
Spring Boot 2.7.0-2.7.17, 3.0.0-3.0.12, 3.1.0-3.1.5 - Denial of Service via Crafted HTTP Requests
Nov 28, 2023
CVSS 5.3
EPSS 0.00
CVE-2023-34053 MEDIUM
Spring Framework 6.0.0-6.0.13 - Denial of Service via Crafted HTTP Requests
Nov 28, 2023
CVSS 5.3
EPSS 0.01
CVE-2023-34060 CRITICAL
VMware Cloud Director Appliance <10.5 - Auth Bypass
Nov 14, 2023
CVSS 9.8
EPSS 0.00
CVE-2023-20886 HIGH
VMware Workspace ONE UEM 22.3.0.2-22.3.0.48 - Open Redirect via SAML Response
Oct 31, 2023
CVSS 8.8
EPSS 0.00
CVE-2023-34059 HIGH
VMware Open VM Tools 11.0.0-12.2.9 - File Descriptor Hijack via vmware-user-suid-wrapper
Oct 27, 2023
CVSS 7.4
EPSS 0.00
CVE-2023-34058 HIGH
VMware Tools - Privilege Escalation
Oct 27, 2023
CVSS 7.1
EPSS 0.00
CVE-2023-34057 HIGH
VMware Tools - Privilege Escalation
Oct 27, 2023
CVSS 7.8
EPSS 0.00
CVE-2023-46120 MEDIUM
RabbitMQ Java Client < 5.18.0 - Uncontrolled Resource Consumption via Large Message Processing
Oct 25, 2023
CVSS 4.9
EPSS 0.01
CVE-2023-46118 MEDIUM
RabbitMQ < 3.11.24 - Authenticated Denial of Service via HTTP API Large Message
Oct 25, 2023
CVSS 4.9
EPSS 0.00
CVE-2023-34056 MEDIUM
VMware vCenter Server - Unauthorized Data Access via Partial Information Disclosure
Oct 25, 2023
CVSS 4.3
EPSS 0.00
CVE-2023-34048 CRITICAL KEVNUCLEI
VMware vCenter Server - Out-of-bounds Write in DCERPC Protocol Implementation
Oct 25, 2023
CVSS 9.8
EPSS 0.93
CVE-2023-34045 MEDIUM
VMware Fusion <13.5 - Privilege Escalation
Oct 20, 2023
CVSS 6.6
EPSS 0.00
CVE-2023-34046 MEDIUM
VMware Fusion <13.5 - Privilege Escalation
Oct 20, 2023
CVSS 6.7
EPSS 0.00
CVE-2023-34044 HIGH
VMware Workstation <17.5 & Fusion <13.5 - Info Disclosure
Oct 20, 2023
CVSS 7.1
EPSS 0.00
CVE-2023-34052 HIGH
VMware Aria Operations for Logs - SSRF
Oct 20, 2023
CVSS 7.8
EPSS 0.00
CVE-2023-34051 CRITICAL
VMware Aria Operations for Logs - RCE
Oct 20, 2023
CVSS 9.8
EPSS 0.72
CVE-2023-34050 MEDIUM
Spring AMQP <2.4.16 & <3.0.9 - Deserialization
Oct 19, 2023
CVSS 5.0
EPSS 0.43
CVE-2023-34043 MEDIUM
VMware Aria Operations - Privilege Escalation
Sep 27, 2023
CVSS 6.7
EPSS 0.00
CVE-2023-34047 LOW
Spring for GraphQL <1.2.2 - Info Disclosure
Sep 20, 2023
CVSS 3.1
EPSS 0.00
CVE-2023-20900 HIGH
VMware vSphere <8.0 - Privilege Escalation
Aug 31, 2023
CVSS 7.1
EPSS 0.01
CVE-2023-34039 CRITICAL NUCLEI
VMWare Aria Operations for Networks (vRealize Network Insight) SSH Private Key Exposure
Aug 29, 2023
CVSS 9.8
EPSS 0.93
CVE-2023-20890 HIGH
VMware Aria Operations for Networks 6.2.0-6.10.0 - Authenticated Arbitrary File Write and Remote Code Execution
Aug 29, 2023
CVSS 7.2
EPSS 0.01
CVE-2023-34040 MEDIUM
Spring for Apache Kafka <3.0.9 & <2.9.10 - Deserialization
Aug 24, 2023
CVSS 5.3
EPSS 0.21
Products
workstation 213 esxi 139 cloud_foundation 132 fusion 131 player 89 esx 86 vcenter_server 79 server 58 spring_framework 48 ace 44 identity_manager 28 workstation_pro 27 workstation_player 26 horizon_client 25 spring_security 24 Workstation 23 tools 22 vrealize_suite_lifecycle_manager 21 vrealize_automation 20 spring_boot 18 vrealize_operations 18 ESXi 16 vmware_workstation 15 vrealize_log_insight 15 workspace_one_access 15 horizon_view 14 spring_ai 14 vcenter_server_appliance 14 Fusion 13 aria_operations 13
Quick Filters
Critical CVEs With Exploits In CISA KEV