VMware
26 CVEs in CISA KEV — 9 with confirmed ransomware use
Products
| CVE | Product | CVSS | EPSS | Added | Due | Flags | Description |
|---|---|---|---|---|---|---|---|
CVE-2023-34048 |
vCenter Server | — | 0.9923 | 2024-01-22 | 2024-02-12 | VMware vCenter Server contains an out-of-bounds write vulnerability in the imple | |
CVE-2023-20887 |
Aria Operations for Networks | — | 0.9828 | 2023-06-22 | 2023-07-13 | VMware Aria Operations for Networks (formerly vRealize Network Insight) contains | |
CVE-2024-38812 |
vCenter Server | — | 0.5457 | 2024-11-20 | 2024-12-11 | VMware vCenter Server contains a heap-based buffer overflow vulnerability in the | |
CVE-2024-37085 |
ESXi | — | 0.2677 | 2024-07-30 | 2024-08-20 | RW | VMware ESXi contains an authentication bypass vulnerability. A malicious actor w |
CVE-2024-38813 |
vCenter Server | — | 0.1736 | 2024-11-20 | 2024-12-11 | VMware vCenter contains an improper check for dropped privileges vulnerability. | |
CVE-2023-20867 |
Tools | — | 0.1364 | 2023-06-23 | 2023-07-14 | VMware Tools contains an authentication bypass vulnerability in the vgauth modul | |
CVE-2025-22226 |
ESXi, Workstation, and Fusion | — | 0.0163 | 2025-03-04 | 2025-03-25 | VMware ESXi, Workstation, and Fusion contain an information disclosure vulnerabi | |
CVE-2025-22224 |
ESXi and Workstation | — | 0.0156 | 2025-03-04 | 2025-03-25 | VMware ESXi and Workstation contain a time-of-check time-of-use (TOCTOU) race co | |
CVE-2025-22225 |
ESXi | — | 0.0102 | 2025-03-04 | 2025-03-25 | RW | VMware ESXi contains an arbitrary write vulnerability. Successful exploitation a |
CVE-2022-22948 |
vCenter Server | — | — | 2024-07-17 | 2024-08-07 | VMware vCenter Server contains an incorrect default file permissions vulnerabili | |
CVE-2022-22947 |
Spring Cloud Gateway | — | — | 2022-05-16 | 2022-06-06 | Spring Cloud Gateway applications are vulnerable to a code injection attack when | |
CVE-2022-22960 |
Multiple Products | — | — | 2022-04-15 | 2022-05-06 | VMware Workspace ONE Access, Identity Manager and vRealize Automation contain a | |
CVE-2022-22954 |
Workspace ONE Access and Identity Manager | — | — | 2022-04-14 | 2022-05-05 | RW | VMware Workspace ONE Access and Identity Manager allow for remote code execution |
CVE-2022-22965 |
Spring Framework | — | — | 2022-04-04 | 2022-04-25 | Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to | |
CVE-2018-6961 |
SD-WAN Edge | — | — | 2022-03-25 | 2022-04-15 | VMware SD-WAN Edge by VeloCloud contains a command injection vulnerability in th | |
CVE-2021-21973 |
vCenter Server and Cloud Foundation | — | — | 2022-03-07 | 2022-03-21 | VMware vCenter Server and Cloud Foundation Server contain a SSRF vulnerability d | |
CVE-2021-21975 |
vRealize Operations Manager API | — | — | 2022-01-18 | 2022-02-01 | RW | Server Side Request Forgery (SSRF) in vRealize Operations Manager API prior to 8 |
CVE-2021-22017 |
vCenter Server | — | — | 2022-01-10 | 2022-01-24 | Rhttproxy as used in vCenter Server contains a vulnerability due to improper imp | |
CVE-2019-5544 |
VMware ESXi and Horizon DaaS | — | — | 2021-11-03 | 2022-05-03 | RW | VMware ESXi and Horizon Desktop as a Service (DaaS) OpenSLP contains a heap-base |
CVE-2020-3992 |
ESXi | — | — | 2021-11-03 | 2022-05-03 | RW | VMware ESXi OpenSLP contains a use-after-free vulnerability that allows an attac |
CVE-2020-3950 |
Multiple Products | — | — | 2021-11-03 | 2022-05-03 | VMware Fusion, Remote Console (VMRC) for Mac, and Horizon Client for Mac contain | |
CVE-2021-22005 |
vCenter Server | — | — | 2021-11-03 | 2021-11-17 | RW | VMware vCenter Server contains a file upload vulnerability in the Analytics serv |
CVE-2020-3952 |
vCenter Server | — | — | 2021-11-03 | 2022-05-03 | VMware vCenter Server contains an information disclosure vulnerability in the VM | |
CVE-2021-21972 |
vCenter Server | — | — | 2021-11-03 | 2021-11-17 | RW | VMware vCenter Server vSphere Client contains a remote code execution vulnerabil |
CVE-2021-21985 |
vCenter Server | — | — | 2021-11-03 | 2021-11-17 | RW | VMware vSphere Client contains an improper input validation vulnerability in the |
CVE-2020-4006 |
Multiple Products | — | — | 2021-11-03 | 2022-05-03 | VMware Workspace One Access, Access Connector, Identity Manager, and Identity Ma |