CISA Known Exploited Vulnerabilities
29 vulnerabilities with confirmed active exploitation.
| CVE | Vendor | Product | CVSS | EPSS | Added | Due | Flags |
|---|---|---|---|---|---|---|---|
CVE-2025-22226 |
VMware | ESXi, Workstation, and Fusion | — | 0.0163 | 2025-03-04 | 2025-03-25 | |
CVE-2025-22225 |
VMware | ESXi | — | 0.0102 | 2025-03-04 | 2025-03-25 | RW |
CVE-2025-22224 |
VMware | ESXi and Workstation | — | 0.0156 | 2025-03-04 | 2025-03-25 | |
CVE-2024-38813 |
VMware | vCenter Server | — | 0.1736 | 2024-11-20 | 2024-12-11 | |
CVE-2024-38812 |
VMware | vCenter Server | — | 0.5457 | 2024-11-20 | 2024-12-11 | |
CVE-2024-37085 |
VMware | ESXi | — | 0.2677 | 2024-07-30 | 2024-08-20 | RW |
CVE-2022-22948 |
VMware | vCenter Server | — | — | 2024-07-17 | 2024-08-07 | |
CVE-2023-34048 |
VMware | vCenter Server | — | 0.9923 | 2024-01-22 | 2024-02-12 | |
CVE-2023-20867 |
VMware | Tools | — | 0.1364 | 2023-06-23 | 2023-07-14 | |
CVE-2023-20887 |
VMware | Aria Operations for Networks | — | 0.9828 | 2023-06-22 | 2023-07-13 | |
CVE-2022-22963 |
VMware Tanzu | Spring Cloud | — | — | 2022-08-25 | 2022-09-15 | |
CVE-2022-22947 |
VMware | Spring Cloud Gateway | — | — | 2022-05-16 | 2022-06-06 | |
CVE-2022-22960 |
VMware | Multiple Products | — | — | 2022-04-15 | 2022-05-06 | |
CVE-2022-22954 |
VMware | Workspace ONE Access and Identity Manager | — | — | 2022-04-14 | 2022-05-05 | RW |
CVE-2022-22965 |
VMware | Spring Framework | — | — | 2022-04-04 | 2022-04-25 | |
CVE-2020-5410 |
VMware Tanzu | Spring Cloud Configuration (Config) Server | — | — | 2022-03-25 | 2022-04-15 | |
CVE-2018-6961 |
VMware | SD-WAN Edge | — | — | 2022-03-25 | 2022-04-15 | |
CVE-2018-1273 |
VMware Tanzu | Spring Data Commons | — | — | 2022-03-25 | 2022-04-15 | RW |
CVE-2021-21973 |
VMware | vCenter Server and Cloud Foundation | — | — | 2022-03-07 | 2022-03-21 | |
CVE-2021-21975 |
VMware | vRealize Operations Manager API | — | — | 2022-01-18 | 2022-02-01 | RW |
CVE-2021-22017 |
VMware | vCenter Server | — | — | 2022-01-10 | 2022-01-24 | |
CVE-2019-5544 |
VMware | VMware ESXi and Horizon DaaS | — | — | 2021-11-03 | 2022-05-03 | RW |
CVE-2020-3992 |
VMware | ESXi | — | — | 2021-11-03 | 2022-05-03 | RW |
CVE-2020-3950 |
VMware | Multiple Products | — | — | 2021-11-03 | 2022-05-03 | |
CVE-2021-22005 |
VMware | vCenter Server | — | — | 2021-11-03 | 2021-11-17 | RW |
CVE-2020-3952 |
VMware | vCenter Server | — | — | 2021-11-03 | 2022-05-03 | |
CVE-2021-21972 |
VMware | vCenter Server | — | — | 2021-11-03 | 2021-11-17 | RW |
CVE-2021-21985 |
VMware | vCenter Server | — | — | 2021-11-03 | 2021-11-17 | RW |
CVE-2020-4006 |
VMware | Multiple Products | — | — | 2021-11-03 | 2022-05-03 |