CVE-2022-22977

🗓️ 24 May 2022 18:15:38Reported by vmwareType

cve🔗 web.nvd.nist.gov📰️ 3 Media mentions👁 203 Views

VMware Tools for Windows(12.0.0, 11.x.y and 10.x.y) XML External Entity (XXE) vulnerabilit

Reporter	Title	Published	Views	Family All 16
ATTACKERKB	CVE-2022-22977	24 May 202219:15	–	attackerkb
BDU FSTEC	The vulnerability of the VMware Tools utility set for Windows operating systems allows attackers to execute XXE attacks.	18 Aug 202200:00	–	bdu_fstec
Circl	CVE-2022-22977	24 May 202222:37	–	circl
CNNVD	VMware Tools 代码问题漏洞	24 May 202200:00	–	cnnvd
Cvelist	CVE-2022-22977	24 May 202218:15	–	cvelist
EUVD	EUVD-2022-28092	3 Oct 202520:07	–	euvd
NVD	CVE-2022-22977	24 May 202219:15	–	nvd
OSV	CVE-2022-22977	24 May 202219:15	–	osv
Prion	Xxe	24 May 202219:15	–	prion
Rapid7 Blog	The Hidden Harm of Silent Patches	6 Jun 202216:00	–	rapid7blog

NVD

Node

vmware toolsRange10.0.0–10.3.24

vmware toolsRange11.0.0–11.3.5

vmware toolsRange12.0.0–12.0.5

AND

microsoft windowsMatch-

[
  {
    "product": "VMware Tools for Windows",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "VMware Tools for Windows (12.0.0, 11.x.y and 10.x.y)"
      }
    ]
  }
]