Design/Logic Flaw

VMware Tools for Windows 11.x.y and 10.x.y prior to 12.0.0 contains an uncontrolled search path vulnerability. A malicious actor with local administrative privileges in the Windows guest OS, where VMware Tools is installed, may be able to execute code with system privileges in the Windows guest O...

CVE-2022-22943

VMware Tools for Windows 11.x.y and 10.x.y prior to 12.0.0 contains an uncontrolled search path vulnerability. A malicious actor with local administrative privileges in the Windows guest OS, where VMware Tools is installed, may be able to execute code with system privileges in the Windows guest O...

CVE-2022-22943

CVE-2022-22943 affects VMware Tools for Windows 11.x.y and 10.x.y prior to 12.0.0, where an uncontrolled search path element can be leveraged by a local administrator in the Windows guest to run code with SYSTEM privileges. The issue is attributed to insufficient/unspecified path handling in VMwa...

Exploit for Code Injection in Vmware Spring_Cloud_Gateway

Spring Cloud Gateway...

Exploit for Expression Language Injection in Vmware Spring_Cloud_Gateway

Spring Cloud Gateway...

Exploit for Code Injection in Vmware Spring_Cloud_Gateway

CVE-2022-22947RceExp Spring Cloud Gateway 远程代码执行漏洞Exp Spring...

Exploit for Code Injection in Vmware Spring_Cloud_Gateway

cve-2022-22947 p...

Vmware VMware Spring Cloud Gateway Trust Management Vulnerability

Vmware VMware Spring Cloud Gateway is a gateway component from Vmware, Inc. A trust management issue vulnerability exists in VMware Spring Cloud Gateway that stems from a security bypass issue when using the HTTP2 insecure TrustManager. A local user can send a specially crafted request and connec...

CVE-2022-22943: Uncontrolled Search Path Element

VMware Tools for Windows 11.x.y and 10.x.y prior to 12.0.0 contains an uncontrolled search path vulnerability. A malicious actor with local administrative privileges in the Windows guest OS, where VMware Tools is installed, may be able to execute code with system privileges in the Windows guest O...

CVE-2022-22944

VMware Workspace ONE Boxer contains a stored cross-site scripting XSS vulnerability. Due to insufficient sanitization and validation, in VMware Workspace ONE Boxer calendar event descriptions, a malicious actor can inject script tags to execute arbitrary script within a user's window...

CVE-2022-22944

VMware Workspace ONE Boxer contains a stored cross-site scripting XSS vulnerability. Due to insufficient sanitization and validation, in VMware Workspace ONE Boxer calendar event descriptions, a malicious actor can inject script tags to execute arbitrary script within a user's window...

Cross site scripting

VMware Workspace ONE Boxer contains a stored cross-site scripting XSS vulnerability. Due to insufficient sanitization and validation, in VMware Workspace ONE Boxer calendar event descriptions, a malicious actor can inject script tags to execute arbitrary script within a user's window...

CVE-2022-22944

VMware Workspace ONE Boxer contains a stored cross-site scripting XSS vulnerability. Due to insufficient sanitization and validation, in VMware Workspace ONE Boxer calendar event descriptions, a malicious actor can inject script tags to execute arbitrary script within a user's window...

CVE-2022-22944

CVE-2022-22944 affects VMware Workspace ONE Boxer. The issue is a stored XSS in calendar event descriptions caused by insufficient sanitization/validation, enabling injection of script tags. Several sources corroborate a stored XSS vulnerability in Boxer, with VMware’s advisory VMSA-2022-0006 sta...

CVE-2022-22944: Improper Neutralization of Input During Web Page Generation

VMware Workspace ONE Boxer contains a stored cross-site scripting XSS vulnerability. Due to insufficient sanitization and validation, in VMware Workspace ONE Boxer calendar event descriptions, a malicious actor can inject script tags to execute arbitrary script within a user's window...

ESXi 6.5 / 6.7 / 7.0 Multiple Vulnerabilities (VMSA-2022-0004)

The remote VMware ESXi host is version 6.5, 6.7 or 7.0 and is affected by multiple vulnerabilities, including the following: - VMware ESXi, Workstation, and Fusion contain a use-after-free vulnerability in the XHCI USB controller. A malicious actor with local administrative privileges on a virtua...

VMware Tools for Windows code-related vulnerabilities

Vmware VMware Tools for Windows is a set of Windows-based enhancement tools for VMWare virtual machines from Vmware, a VMware driver for enhancing virtual graphics and hard drive performance and synchronizing virtual machine and host clocks. for Windows is vulnerable to a code issue that could be...

PT-2022-2232 · Vmware +1 · Vmware Tools +1

Name of the Vulnerable Software and Affected Versions: VMware Tools for Windows versions 10.x.y through 11.x.y prior to 12.0.0 Description: The issue is related to an uncontrolled search path vulnerability in VMware Tools for Windows. A malicious actor with local administrative privileges in the...

VMSA-2022-0007:VMware Tools for Windows update addresses an uncontrolled search path vulnerability

Advisory ID: VMSA-2022-0007 CVSSv3 Range: 5.6 Issue Date:2022-03-01 Updated On: 2022-03-01 Initial Advisory CVEs: CVE-2022-22943 Synopsis: VMware Tools for Windows update addresses an uncontrolled search path vulnerability CVE-2022-22943 RSS Feed Download PDF Download Text File Share this page on...

SRC-2022-0005 : VMware Workspace ONE Access customError.ftl Server-side Template Injection Remote Code Execution Vulnerability

Vulnerability Details: This vulnerability allows remote attackers to execute arbitrary code on affected installations of VMware Workspace ONE Access. Authentication is not required to exploit this vulnerability. The specific flaw exists within the customError.ftl template. The issue results from...