Lucene search
K
VmwareRecent

548 matches found

VMware
VMware
added 2026/06/08 12:0 a.m.68 views

VMSA-2026-0004: VMware Cloud Foundation Operations updates address multiple vulnerabilities (CVE-2026-41722, CVE-2026-41723 and CVE-2026-41724)

Advisory ID: | VMSA-2026-0004 ---|--- Advisory Severity: | Important CVSSv3 Range: | 8.0 Synopsis: | VMware Cloud Foundation Operations updates address multiple vulnerabilities CVE-2026-41722, CVE-2026-41723 and CVE-2026-41724 Issue date: | 2026-06-08 Updated on: | 2026-06-08 Initial advisory CVE...

8CVSS4.8AI score0.00266EPSS
Exploits0References5
VMware
VMware
added 2026/05/14 12:0 a.m.23 views

VMSA-2026-0003: VMware Fusion updates address privilege escalation vulnerability (CVE-2026-41702)

Advisory ID: | VMSA-2026-0003 ---|--- Advisory Severity: | Important CVSSv3 Range: | 7.8 Synopsis: | VMware Fusion updates address privilege escalation vulnerability CVE-2026-41702 Issue date: | 2026-05-14 Updated on: | 2026-05-14 Initial Advisory CVEs | CVE-2026-41702 1. Impacted Products VMware...

7.8CVSS5.8AI score0.00122EPSS
Exploits0References4Affected Software1
VMware
VMware
added 2026/02/26 12:0 a.m.28 views

VMSA-2026-0002: VMware Workstation and Fusion updates address multiple vulnerabilities (CVE-2026-22715, CVE-2026-22716, CVE-2026-22717, CVE-2026-22722)

Advisory ID: | VMSA-2026-0002 ---|--- Advisory Severity: | Moderate CVSSv3 Range: | 2.7 - 6.1 Synopsis: | VMware Workstation and Fusion updates address multiple vulnerabilities CVE-2026-22715, CVE-2026-22716, CVE-2026-22717, CVE-2026-22722 Issue date: | 2026-02-26 Updated on: | 2026-02-26 Initial...

6.1CVSS5.5AI score0.00203EPSS
Exploits0References6Affected Software2
VMware
VMware
added 2026/02/24 12:0 a.m.20 views

VMSA-2026-0001: VMware Aria Operations updates address multiple vulnerabilities (CVE-2026-22719, CVE-2026-22720 and CVE-2026-22721)

Advisory ID: | VMSA-2026-0001.1 ---|--- Advisory Severity: | Important CVSSv3 Range: | 6.2 - 8.1 Synopsis: | VMware Aria Operations updates address multiple vulnerabilities CVE-2026-22719, CVE-2026-22720 and CVE-2026-22721 Issue date: | 2026-02-24 Updated on: | 2026-03-03 Updated Advisory CVEs |...

9CVSS8AI score0.17424EPSS
Exploits0References6
VMware
VMware
added 2025/12/28 12:0 a.m.16 views

Product Release Advisory - VMware Tanzu Greenplum Backup and Restore 1.32.2

Product Release Advisory - VMware Tanzu Greenplum Backup and Restore 1.32.2 Advisory ID | TNZ-2025-0406 ---|--- Tanzu Issue Date | 2025-12-19 Updated on | | Highest Score CVE from list below advisory details ---|--- Severity | High CVSS V4 Vector | Unavailable CVSS V4 Score | Unavailable Sev:...

7.5CVSS6.9AI score0.00586EPSS
Exploits0References14
VMware
VMware
added 2025/09/29 12:0 a.m.51 views

VMSA-2025-0015: VMware Aria Operations and VMware Tools updates address multiple vulnerabilities (CVE-2025-41244,CVE-2025-41245, CVE-2025-41246)

Advisory ID: | VMSA-2025-0015.1 ---|--- Advisory Severity: | Important CVSSv3 Range: | 4.9 -7.8 Synopsis: | VMware Aria Operations and VMware Tools updates address multiple vulnerabilities CVE-2025-41244,CVE-2025-41245, CVE-2025-41246 Issue date: | 2025-09-29 Updated on: | 2025-10-30 CVEs |...

7.8CVSS6.8AI score0.07606EPSS
Exploits3References5
VMware
VMware
added 2025/09/29 12:0 a.m.23 views

VMSA-2025-0016: VMware vCenter and NSX updates address multiple vulnerabilities (CVE-2025-41250, CVE-2025-41251, CVE-2025-41252)

Advisory ID: | VMSA-2025-0016 ---|--- Advisory Severity: | Important CVSSv3 Range: | 7.5-8.5 Synopsis: | VMware vCenter and NSX updates address multiple vulnerabilities CVE-2025-41250, CVE-2025-41251, CVE-2025-41252 Issue date: | 2025-09-29 Updated on: | 2025-09-29 Initial Advisory CVEs |...

8.5CVSS7.6AI score0.01007EPSS
Exploits0References6
VMware
VMware
added 2025/07/29 12:0 a.m.21 views

VMSA-2025-0014: VMware vCenter updates address a denial-of-service vulnerability (CVE-2025-41241)

Advisory ID: | VMSA-2025-0014.1 ---|--- Advisory Severity: | Moderate CVSSv3 Range: | 4.4 Synopsis: | VMware vCenter updates address a denial-of-service vulnerability CVE-2025-41241 Issue date: | 2025-07-29 Updated on: | 2025-07-30 CVEs | CVE-2025-41241 1. Impacted Products VMware Cloud Foundatio...

4.4CVSS6.3AI score0.00263EPSS
Exploits0References4
VMware
VMware
added 2025/07/15 12:0 a.m.49 views

VMSA-2025-0013: VMware ESXi, Workstation, Fusion, and Tools updates address multiple vulnerabilities (CVE-2025-41236, CVE-2025-41237, CVE-2025-41238, CVE-2025-41239)

Advisory ID: | VMSA-2025-0013 ---|--- Advisory Severity: | Critical CVSSv3 Range: | 6.2-9.3 Synopsis: | VMware ESXi, Workstation, Fusion, and Tools updates address multiple vulnerabilities CVE-2025-41236, CVE-2025-41237, CVE-2025-41238, CVE-2025-41239 Issue date: | 2025-07-15 Updated on: |...

9.3CVSS6.9AI score0.02107EPSS
Exploits0References27
VMware
VMware
added 2025/06/04 12:0 a.m.24 views

VMSA-2025-0012: VMware NSX updates address multiple vulnerabilities (CVE-2025-22243, CVE-2025-22244, CVE-2025-22245)

Advisory ID: | VMSA-2025-0012.1 ---|--- Advisory Severity: | Important CVSSv3 Range: | 5.9-7.5 Synopsis: | VMware NSX updates address multiple vulnerabilities CVE-2025-22243, CVE-2025-22244, CVE-2025-22245 Issue date: | 2025-06-04 Updated on: | 2025-07-18 Initial Advisory CVEs | CVE-2025-22243,...

7.5CVSS8.5AI score0.00309EPSS
Exploits0References5Affected Software5
VMware
VMware
added 2025/05/20 12:0 a.m.20 views

VMSA-2025-0009 : VMware Cloud Foundation updates address multiple vulnerabilities (CVE-2025-41229, CVE-2025-41230, CVE-2025-41231)

Advisory ID: | VMSA-2025-0009 ---|--- Advisory Severity: | Important CVSSv3 Range: | 7.3-8.2 Synopsis: | VMware Cloud Foundation updates address multiple vulnerabilities CVE-2025-41229, CVE-2025-41230, CVE-2025-41231 Issue date: | 2025-05-20 Updated on: | 2025-05-20 Initial Advisory CVEs |...

8.2CVSS7AI score0.0062EPSS
Exploits0References7Affected Software1
VMware
VMware
added 2025/05/20 12:0 a.m.113 views

VMSA-2025-0010 : VMware ESXi, vCenter Server, Workstation, and Fusion updates address multiple vulnerabilities (CVE-2025-41225, CVE-2025-41226, CVE-2025-41227, CVE-2025-41228)

Advisory ID: | VMSA-2025-0010 ---|--- Advisory Severity: | Important CVSSv3 Range: | 4.3-8.8 Synopsis: | VMware ESXi, vCenter Server, Workstation, and Fusion updates address multiple vulnerabilities CVE-2025-41225, CVE-2025-41226, CVE-2025-41227, CVE-2025-41228 Issue date: | 2025-05-20 Updated on...

8.8CVSS6.2AI score0.00748EPSS
Exploits2References9Affected Software10
VMware
VMware
added 2025/05/12 12:0 a.m.45 views

VMSA-2025-0008: VMware Aria automation updates address a DOM based Cross-site scripting vulnerability (CVE-2025-22249)

Advisory ID: | VMSA-2025-0008 ---|--- Advisory Severity: | Important CVSSv3 Range: | 8.2 Synopsis: | VMware Aria automation updates address a DOM based Cross-site scripting vulnerability CVE-2025-22249 Issue date: | 2025-05-12 Updated on: | 2025-05-12 CVEs | CVE-2025-22249 1. Impacted Products...

8.2CVSS6.1AI score0.00317EPSS
Exploits0References3
VMware
VMware
added 2025/05/12 12:0 a.m.79 views

VMSA-2025-0007: VMware Tools update addresses an insecure file handling vulnerability (CVE-2025-22247)

Advisory ID: | VMSA-2025-0007 ---|--- Advisory Severity: | Moderate CVSSv3 Range: | 6.1 Synopsis: | VMware Tools update addresses an insecure file handling vulnerability CVE-2025-22247 Issue date: | 2025-05-12 Updated on: | 2025-05-12 Initial Advisory CVEs | CVE-2025-22247 1. Impacted Products...

6.1CVSS6.7AI score0.0024EPSS
Exploits0References3Affected Software1
VMware
VMware
added 2025/04/01 12:0 a.m.23 views

VMSA-2025-0006: VMware Aria Operations updates address a local privilege escalation vulnerability (CVE-2025-22231)

Advisory ID: | VMSA-2025-0006 ---|--- Advisory Severity: | Important CVSSv3 Range: | 7.8 Synopsis: | VMware Aria Operations updates address a local privilege escalation vulnerability CVE-2025-22231 Issue date: | 2025-04-01 Updated on: | 2025-04-01 Initial Advisory CVEs | CVE-2025-22231 1. Impacte...

7.8CVSS7.7AI score0.00145EPSS
Exploits0References3Affected Software4
VMware
VMware
added 2025/03/25 12:0 a.m.53 views

VMSA-2025-0005: VMware Tools for Windows update addresses an authentication bypass vulnerability (CVE-2025-22230)

Advisory ID: | VMSA-2025-0005 ---|--- Advisory Severity: | Important CVSSv3 Range: | 7.8 Synopsis: | VMware Tools for Windows update addresses an authentication bypass vulnerability CVE-2025-22230 Issue date: | 2025-03-25 Updated on: | 2025-03-25 Initial Advisory CVEs | CVE-2025-22230 1. Impacted...

7.8CVSS7.6AI score0.00332EPSS
Exploits0References3Affected Software1
VMware
VMware
added 2025/03/04 12:0 a.m.239 views

VMSA-2025-0004: VMware ESXi, Workstation, and Fusion updates address multiple vulnerabilities (CVE-2025-22224, CVE-2025-22225, CVE-2025-22226)

Advisory ID: | VMSA-2025-0004 ---|--- Severity: | Critical CVSSv3 Range: | 7.1-9.3 Synopsis: | VMware ESXi, Workstation, and Fusion updates address multiple vulnerabilities CVE-2025-22224, CVE-2025-22225, CVE-2025-22226 Issue date: | 2025-03-04 Updated on: | 2025-03-04 Initial Advisory CVEs |...

9.3CVSS7.7AI score0.01676EPSS
Exploits0References18Affected Software6
VMware
VMware
added 2025/01/30 12:0 a.m.38 views

VMSA-2025-0003: VMware Aria Operations for Logs and VMware Aria Operations updates address multiple vulnerabilities (CVE-2025-22218, CVE-2025-22219, CVE-2025-22220, CVE-2025-22221 and CVE-2025-22222)

Advisory ID: | VMSA-2025-0003 ---|--- Advisory Severity: | Important CVSSv3 Range: | 5.2-8.5 Synopsis: | VMware Aria Operations for Logs and VMware Aria Operations updates address multiple vulnerabilities CVE-2025-22218, CVE-2025-22219, CVE-2025-22220, CVE-2025-22221, CVE-2025-22222 Issue date: |...

9CVSS7.2AI score0.00647EPSS
Exploits0References8Affected Software3
VMware
VMware
added 2025/01/07 12:0 a.m.25 views

VMSA-2025-0001: VMware Aria automation update addresses a server side request forgery vulnerability (CVE-2025-22215)

Advisory ID: | VMSA-2025-0001 ---|--- Advisory Severity: | Moderate CVSSv3 Range: | 4.3 Synopsis: | VMware Aria Automation update addresses a server side request forgery vulnerability CVE-2025-22215 Issue date: | 2025-01-07 Updated on: | 2025-01-07 CVEs | CVE-2025-22215 1. Impacted Products VMwar...

4.3CVSS6.9AI score0.00247EPSS
Exploits0References3Affected Software2
VMware
VMware
added 2024/11/26 12:0 a.m.18 views

VMSA-2024-0022: VMware Aria Operations updates address multiple vulnerabilities(CVE-2024-38830, CVE-2024-38831, CVE-2024-38832, CVE-2024-38833, CVE-2024-38834)

Advisory ID: | VMSA-2024-0022 ---|--- Advisory Severity: | Important CVSSv3 Range: | 6.5-7.8 Synopsis: | VMware Aria Operations updates address multiple vulnerabilitiesCVE-2024-38830, CVE-2024-38831, CVE-2024-38832, CVE-2024-38833 and CVE-2024-38834 Issue date: | 26 Nov 2024 Updated on: | 26 Nov...

7.8CVSS6.9AI score0.00449EPSS
Exploits0References7Affected Software2
VMware
VMware
added 2024/10/16 12:0 a.m.15 views

VMSA-2024-0021: VMware HCX addresses an authenticated SQL injection vulnerability (CVE-2024-38814)

Advisory ID: | VMSA-2024-0021 ---|--- Severity: | Important CVSSv3 Range: | 8.8 Synopsis: | VMware HCX addresses an authenticated SQL injection vulnerability CVE-2024-38814 Issue Date: | 2024-10-16 Updated On: | 2024-10-16 Initial Advisory CVEs: | CVE-2024-38814 1. Impacted Products VMware HCX 2...

8.8CVSS8.4AI score0.14556EPSS
Exploits0References10Affected Software1
VMware
VMware
added 2024/10/09 12:0 a.m.24 views

VMSA-2024-0020:VMware NSX updates address multiple vulnerabilities (CVE-2024-38818, CVE-2024-38817, CVE-2024-38815)

Advisory ID: | VMSA-2024-0020 ---|--- Advisory Severity: | Moderate CVSSv3 Range: | 4.3-6.7 Synopsis: | VMware NSX updates address multiple vulnerabilities CVE-2024-38818, CVE-2024-38817, CVE-2024-38815 Issue date: | 2024-10-09 Updated on: | 2024-10-09 Initial Advisory CVEs | CVE-2024-38818,...

6.7CVSS8.2AI score0.00519EPSS
Exploits0References9Affected Software4
VMware
VMware
added 2024/09/17 12:0 a.m.24 views

VMSA-2024-0019:VMware vCenter Server updates address heap-overflow and privilege escalation vulnerabilities (CVE-2024-38812, CVE-2024-38813)

Advisory ID: | VMSA-2024-0019.3 ---|--- Severity: | Critical CVSSv3 Range: | 7.5-9.8 Synopsis: | VMware vCenter Server updates address heap-overflow and privilege escalation vulnerabilities CVE-2024-38812, CVE-2024-38813 Issue date: | 2024-09-17 Updated on: | 2024-10-21 CVEs | CVE-2024-38812,...

9.8CVSS8.2AI score0.53477EPSS
Exploits0References20Affected Software2
VMware
VMware
added 2024/09/03 12:0 a.m.15 views

VMSA-2024-0018:VMware Fusion update addresses a code execution vulnerability (CVE-2024-38811)

Advisory ID: | VMSA-2024-0018 ---|--- Advisory Severity: | Important CVSSv3 Range: | 8.8 Synopsis: | VMware Fusion update addresses a code-execution vulnerability CVE-2024-38811 Issue date: | 2024-09-03 Updated on: | 2024-09-03 Initial Advisory CVEs | CVE-2024-38811 1. Impacted Products VMware...

8.8CVSS7.3AI score0.0028EPSS
Exploits0References6Affected Software1
VMware
VMware
added 2024/07/10 12:0 a.m.12 views

VMSA-2024-0017: VMware Aria Automation updates address SQL-injection vulnerability (CVE-2024-22280)

Advisory ID: | VMSA-2024-0017 ---|--- Advisory Severity: | Important CVSSv3 Range: | 8.5 Synopsis: | VMware Aria Automation updates address SQL-injection vulnerability CVE-2024-22280 Issue date: | 2024-07-10 Updated on: | 2024-07-10 CVEs | CVE-2024-22280 1. Impacted Products VMware Aria Automatio...

8.5CVSS7.9AI score0.00472EPSS
Exploits0References8Affected Software2
VMware
VMware
added 2024/07/04 12:0 a.m.9 views

VMSA-2024-0016: VMware Cloud Director Availability addresses an HTML injection vulnerability (CVE-2024-22277)

Advisory ID: | VMSA-2024-0016 ---|--- Severity: | Moderate CVSSv3 Range: | 6.4 Issue date: | 2024-07-04 Updated on: | 2024-07-04 Initial Advisory CVEs | CVE-2024-22277 Synopsis: | VMware Cloud Director Availability addresses an HTML injection vulnerability CVE-2024-22277 1. Impacted Products...

6.4CVSS7.4AI score0.00325EPSS
Exploits0References11Affected Software1
VMware
VMware
added 2024/06/27 12:0 a.m.15 views

VMSA-2024-0015: VMware Cloud Director Object Storage Extension addresses an Insertion of Sensitive Information vulnerability (CVE-2024-22276)

Advisory ID: | VMSA-2024-0015 ---|--- Advisory Severity: | Moderate CVSSv3 Range: | 5.3 Synopsis: | VMware Cloud Director Object Storage Extension addresses an Insertion of Sensitive Information vulnerability CVE-2024-22276 Issue Date: | 2024-06-27 Updated On: | 2024-06-27 Initial Advisory CVEs |...

5.3CVSS6.3AI score0.00369EPSS
Exploits0References13Affected Software1
VMware
VMware
added 2024/06/27 12:0 a.m.15 views

VMSA-2024-0014:VMware Cloud Director addresses an improper privilege management vulnerability (CVE-2024-22272)

Advisory ID: | VMSA-2024-0014 ---|--- Advisory Severity: | Moderate CVSSv3 Range: | 4.9 Synopsis: | VMware Cloud Director addresses an Improper Privilege Management vulnerability CVE-2024-22272 Issue Date: | 2024-06-27 Updated on: | 2024-06-27 CVEs: | CVE-2024-22272 1. Impacted Products VMware...

4.9CVSS6.8AI score0.00369EPSS
Exploits0References11Affected Software1
VMware
VMware
added 2024/06/25 12:0 a.m.47 views

VMSA-2024-0013:VMware ESXi and vCenter Server updates address multiple security vulnerabilities (CVE-2024-37085, CVE-2024-37086, CVE-2024-37087)

Advisory ID: | VMSA-2024-0013.2 ---|--- Advisory Severity: | Moderate CVSSv3 Range: | 5.3-6.8 Synopsis: | VMware ESXi and vCenter Server updates address multiple vulnerabilities CVE-2024-37085, CVE-2024-37086, CVE-2024-37087 Issue date: | 2024-06-25 Updated on: | 2024-08-12 CVEs | CVE-2024-37085,...

7.2CVSS7.7AI score0.2677EPSS
Exploits0References25Affected Software3
VMware
VMware
added 2024/06/18 12:0 a.m.23 views

VMSA-2024-0012:VMware vCenter Server updates address heap-overflow and privilege escalation vulnerabilities (CVE-2024-37079, CVE-2024-37080, CVE-2024-37081)

Advisory ID: | VMSA-2024-0012.1 ---|--- Severity: | Critical CVSSv3 Range: | 7.8-9.8 Synopsis: | VMware vCenter Server updates address heap-overflow and privilege escalation vulnerabilities CVE-2024-37079, CVE-2024-37080, CVE-2024-37081 Issue date: | 2024-06-17 Updated on: | 2026-01-23 CVEs |...

9.8CVSS8.8AI score0.22377EPSS
Exploits3References22Affected Software2
VMware
VMware
added 2024/05/21 12:0 a.m.22 views

VMSA-2024-0011:VMware ESXi, Workstation, Fusion and vCenter Server updates address multiple security vulnerabilities (CVE-2024-22273, CVE-2024-22274, CVE-2024-22275)

Advisory ID: | VMSA-2024-0011.1 ---|--- Advisory Severity: | Important CVSSv3 Range: | 4.9-8.1 Synopsis: | VMware ESXi, Workstation, Fusion and vCenter Server updates address multiple security vulnerabilities CVE-2024-22273, CVE-2024-22274, CVE-2024-22275 Issue date: | 2024-05-21 Issue date: |...

8.1CVSS8.5AI score0.02488EPSS
Exploits3References24Affected Software6
VMware
VMware
added 2024/05/14 12:0 a.m.41 views

VMSA-2024-0010: VMware Workstation and Fusion updates address multiple security vulnerabilities (CVE-2024-22267, CVE-2024-22268, CVE-2024-22269, CVE-2024-22270)

Advisory ID: | VMSA-2024-0010 ---|--- Advisory Severity: | Critical CVSSv3 Range: | 7.1-9.3 Synopsis: | VMware Workstation and Fusion updates address multiple security vulnerabilities CVE-2024-22267, CVE-2024-22268, CVE-2024-22269, CVE-2024-22270 Issue date: | 2024-05-14 Updated on: | 2024-05-14...

9.3CVSS7.5AI score0.00684EPSS
Exploits0References21Affected Software2
VMware
VMware
added 2024/05/08 12:0 a.m.165 views

VMSA-2024-0006:VMware ESXi, Workstation, and Fusion updates address multiple security vulnerabilities (CVE-2024-22252, CVE-2024-22253, CVE-2024-22254, CVE-2024-22255)

Advisory ID: | VMSA-2024-0006.1 ---|--- Advisory Severity: | Critical CVSSv3 Range: | 7.1-9.3 Synopsis: | VMware ESXi, Workstation, and Fusion updates address multiple security vulnerabilities CVE-2024-22252, CVE-2024-22253, CVE-2024-22254, CVE-2024-22255 Issue date: | 2024-03-05 Updated on: |...

9.3CVSS9AI score0.03542EPSS
Exploits0References49Affected Software4
VMware
VMware
added 2024/05/08 12:0 a.m.43 views

VMSA-2024-0004:VMware Aria Operations updates address local privilege escalation vulnerability (CVE-2024-22235)

Advisory ID: | VMSA-2024-0004 ---|--- Advisory Severity: | Moderate CVSSv3 Range: | 6.7 Synopsis: | VMware Aria Operations updates address local privilege escalation vulnerability. CVE-2024-22235 Issue date: | 2024-02-20 Updated on: | 2024-02-20 Initial Advisory CVEs | CVE-2024-22235 1. Impacted...

6.7CVSS7AI score0.00194EPSS
Exploits0References13Affected Software2
VMware
VMware
added 2024/05/08 12:0 a.m.29 views

VMSA-2024-0005:VMware Workstation and Fusion updates address an out-of-bounds read vulnerability (CVE-2024-22251)

Advisory ID: | VMSA-2024-0005 ---|--- Advisory Severity: | Moderate CVSSv3 Range: | 5.9 Synopsis: | VMware Workstation and Fusion updates address an out-of-bounds read vulnerability CVE-2024-22251 Issue date: | 2024-02-27 Updated on: | 2024-02-27 Initial Advisory CVEs | CVE-2024-22251 1. Impacted...

5.9CVSS5.6AI score0.00226EPSS
Exploits0References13Affected Software2
VMware
VMware
added 2024/05/08 12:0 a.m.57 views

VMSA-2024-0007:VMware Cloud Director updates address a partial information disclosure vulnerability (CVE-2024-22256)

Advisory ID: | VMSA-2024-0007 ---|--- Advisory Severity: | Moderate CVSSv3 Range: | 4.3 Synopsis: | VMware Cloud Director updates address a partial information disclosure vulnerability CVE-2024-22256. Issue date: | 07 Mar 2024 Updated on: | 07 Mar 2024 Initial Advisory CVEs | CVE-2024-22256 1...

4.3CVSS4.5AI score0.00418EPSS
Exploits0References11Affected Software1
VMware
VMware
added 2024/05/07 12:0 a.m.30 views

VMSA-2024-0003:Addressing Arbitrary Authentication Relay and Session Hijack Vulnerabilities in Deprecated VMware Enhanced Authentication Plug-in (EAP) (CVE-2024-22245, CVE-2024-22250)

Advisory ID: | VMSA-2024-0003 ---|--- CVSSv3 Range: | 9.6 - 7.8 Issue Date: | 2024-02-20 Updated On: | 2024-02-20 Initial Advisory CVEs: | CVE-2024-22245, CVE-2024-22250 Synopsis: | Addressing Arbitrary Authentication Relay and Session Hijack Vulnerabilities in Deprecated VMware Enhanced...

9.6CVSS8.8AI score0.01262EPSS
Exploits0References17Affected Software1
VMware
VMware
added 2024/04/02 12:0 a.m.78 views

VMware SD-WAN Edge and SD-WAN Orchestrator updates address multiple security vulnerabilities.

3a. Unauthenticated Command Injection vulnerability in SD-WAN Edge CVE-2024-22246 VMware SD-WAN Edge contains an unauthenticated command injection vulnerability potentially leading to remote code execution. VMware has evaluated the severity of this issue to be in the Important severity range with...

5.8CVSS9.1AI score0.00411EPSS
Exploits0References11Affected Software2
VMware
VMware
added 2024/03/05 12:0 a.m.101 views

VMware ESXi, Workstation, and Fusion updates address multiple security vulnerabilities (CVE-2024-22252, CVE-2024-22253, CVE-2024-22254, CVE-2024-22255)

3a. Use-after-free vulnerability in XHCI USB controller CVE-2024-22252 VMware ESXi, Workstation, and Fusion contain a use-after-free vulnerability in the XHCI USB controller. VMware has evaluated the severity of this issue to be in the Critical severity range with a maximum CVSSv3 base score of 9...

4.6CVSS6.7AI score0.03542EPSS
Exploits0References17Affected Software4
VMware
VMware
added 2024/02/04 12:0 a.m.77 views

VMSA-2024-0002:VMware Aria Operations for Networks (Formerly vRealize Network Insight) updates address multiple vulnerabilities

Advisory ID: VMSA-2024-0002 CVSSv3 Range: 4.3 - 7.8 Issue Date:2024-02-06 Updated On: 2024-02-06 Initial Advisory CVEs: CVE-2024-22237, CVE-2024-22238, CVE-2024-22239, CVE-2024-22240, CVE-2024-22241 Synopsis: VMware Aria Operations for Networks Formerly vRealize Network Insight updates address...

7.8CVSS6.3AI score0.37849EPSS
Exploits0References20Affected Software1
VMware
VMware
added 2024/01/14 12:0 a.m.55 views

VMSA-2024-0001:VMware Aria Automation (formerly vRealize Automation) updates address a Missing Access Control vulnerability

Advisory ID: VMSA-2024-0001 CVSSv3 Range: 9.9 Issue Date:2024-01-16 Updated On: 2024-01-16 Initial Advisory CVEs: CVE-2023-34063 Synopsis: VMware Aria Automation formerly vRealize Automation updates address a Missing Access Control vulnerability CVE-2023-34063 RSS Feed Download PDF Download Text...

9.9CVSS9AI score0.00949EPSS
Exploits0References24Affected Software2
VMware
VMware
added 2023/12/12 12:0 a.m.52 views

VMware Workspace ONE Launcher updates addresses privilege escalation vulnerability. (CVE-2023-34064)

3. Privilege Escalation Vulnerability Workspace ONE Launcher contains a Privilege Escalation Vulnerability. VMware has evaluated the severity of this issue to be in the Moderate severity range with a maximum CVSSv3 base score of 6.3...

2.1CVSS4.7AI score0.00405EPSS
Exploits0References3Affected Software1
VMware
VMware
added 2023/11/14 12:0 a.m.66 views

VMware Cloud Director Appliance contains an authentication bypass vulnerability (CVE-2023-34060).

3. Authentication Bypass Vulnerability CVE-2023-34060 VMware Cloud Director Appliance contains an authentication bypass vulnerability in case VMware Cloud Director Appliance was upgraded to 10.5 from an older version. VMware has evaluated the severity of this issue to be in the Critical severity...

7.5CVSS10AI score0.01345EPSS
Exploits4References6Affected Software1
VMware
VMware
added 2023/11/13 12:0 a.m.75 views

VMSA-2023-0026:VMware Cloud Director Appliance contains an authentication bypass vulnerability

Advisory ID: VMSA-2023-0026.1 CVSSv3 Range: 9.8 Issue Date:2023-11-14 Updated On: 2023-11-30 CVEs: CVE-2023-34060 Synopsis: VMware Cloud Director Appliance contains an authentication bypass vulnerability CVE-2023-34060. RSS Feed Download PDF Download Text File Share this page on social media: 1...

9.8CVSS8.9AI score0.01345EPSS
Exploits4References15
VMware
VMware
added 2023/10/31 12:0 a.m.31 views

VMware Workspace ONE UEM console updates address an open redirect vulnerability (CVE-2023-20886)

3. Advisory Details VMware Workspace ONE UEM console contains an open redirect vulnerability. VMware has evaluated the severity of this issue to be in the Important severity range with a maximum CVSSv3 base score of 8.8...

5.8CVSS6.3AI score0.00398EPSS
Exploits0References3Affected Software1
VMware
VMware
added 2023/10/25 12:0 a.m.29 views

VMware vCenter Server updates address out-of-bounds write and information disclosure vulnerabilities (CVE-2023-34048, CVE-2023-34056)

3a. VMware vCenter Server Out-of-Bounds Write Vulnerability CVE-2023-34048 vCenter Server contains an out-of-bounds write vulnerability in the implementation of the DCERPC protocol. VMware has evaluated the severity of this issue to be in the Critical severity range with a maximum CVSSv3 base sco...

7.5CVSS6.4AI score0.99212EPSS
Exploits1References8Affected Software2
VMware
VMware
added 2023/10/24 12:0 a.m.67 views

VMSA-2023-0024:VMware Tools updates address Local Privilege Escalation and SAML Token Signature Bypass vulnerabilities

Advisory ID: VMSA-2023-0024 CVSSv3 Range: 7.1 - 7.8 Issue Date:2023-10-26 Updated On: 2023-10-26 Initial Advisory CVEs: CVE-2023-34057, CVE-2023-34058 Synopsis: VMware Tools updates address Local Privilege Escalation and SAML Token Signature Bypass vulnerabilities CVE-2023-34057, CVE-2023-34058 R...

7.8CVSS8.3AI score0.00667EPSS
Exploits0References17Affected Software1
VMware
VMware
added 2023/10/23 12:0 a.m.101 views

VMSA-2023-0023:VMware vCenter Server updates address out-of-bounds write and information disclosure vulnerabilities

Advisory ID: VMSA-2023-0023.1 CVSSv3 Range: 4.3-9.8 Issue Date:2023-10-25 Updated On: 2024-01-17 CVEs: CVE-2023-34048, CVE-2023-34056 Synopsis: VMware vCenter Server updates address out-of-bounds write and information disclosure vulnerabilities CVE-2023-34048, CVE-2023-34056 RSS Feed Download PDF...

9.8CVSS8.1AI score0.99212EPSS
Exploits1References27Affected Software2
VMware
VMware
added 2023/10/18 12:0 a.m.43 views

VMSA-2023-0022:VMware Fusion and Workstation updates address privilege escalation and information disclosure vulnerabilities

Advisory ID: VMSA-2023-0022 CVSSv3 Range: 6.6-7.1 Issue Date:2023-10-19 Updated On: 2023-10-19 Initial Advisory CVEs: CVE-2023-34044, CVE-2023-34045, CVE-2023-34046 Synopsis: VMware Fusion and Workstation updates address privilege escalation and information disclosure vulnerabilities...

7.8CVSS7.2AI score0.00204EPSS
Exploits0References23Affected Software2
VMware
VMware
added 2023/10/17 12:0 a.m.65 views

VMSA-2023-0021:VMware Aria Operations for Logs updates address multiple vulnerabilities.

Advisory ID: VMSA-2023-0021 CVSSv3 Range: 8.1 Issue Date:2023-10-19 Updated On: 2023-10-23 CVEs: CVE-2023-34051, CVE-2023-34052 Synopsis: VMware Aria Operations for Logs updates address multiple vulnerabilities. CVE-2023-34051, CVE-2023-34052 RSS Feed Download PDF Download Text File Share this pa...

9.8CVSS9.4AI score0.44667EPSS
Exploits1References22Affected Software2
Total number of security vulnerabilities548