VMSA-2025-0001: VMware Aria automation update addresses a server side request forgery vulnerability (CVE-2025-22215)

Advisory ID: | VMSA-2025-0001 ---|--- Advisory Severity: | Moderate CVSSv3 Range: | 4.3 Synopsis: | VMware Aria Automation update addresses a server side request forgery vulnerability CVE-2025-22215 Issue date: | 2025-01-07 Updated on: | 2025-01-07 CVEs | CVE-2025-22215 1. Impacted Products VMwar...

VMSA-2022-0003:VMware Cloud Foundation contains an information disclosure vulnerability due to the logging of plaintext credentials within some log files

Advisory ID: VMSA-2022-0003.1 CVSSv3 Range: 6.0 Issue Date:2022-01-31 Updated On: 2022-02-14 CVEs: CVE-2022-22939 Synopsis: VMware Cloud Foundation contains an information disclosure vulnerability due to the logging of plaintext credentials within some log files. RSS Feed Download PDF Download Te...

VMSA-2019-0016:VMware Cloud Foundation and VMware Harbor Container Registry for PCF address broken access control vulnerability

VMware Security Advisories Advisory ID| VMSA-2019-0016 ---|--- Advisory Severity| Critical CVSSv3 Range| 9.1 Synopsis| VMware Cloud Foundation and VMware Harbor Container Registry for PCF address broken access control vulnerability CVE-2019-16919 Issue Date| 2019-10-15 Updated On| 2019-12-11 CVEs...

VMware NSX and vCNS product updates address a critical information disclosure vulnerability

a. VMware NSX and vCNS critical information disclosure vulnerability VMware NSX and vCNS with SSL-VPN enabled contain a critical input validation vulnerability. This issue may allow a remote attacker to gain access to sensitive information. The Common Vulnerabilities and Exposures project...

VMSA-2025-0012: VMware NSX updates address multiple vulnerabilities (CVE-2025-22243, CVE-2025-22244, CVE-2025-22245)

Advisory ID: | VMSA-2025-0012.1 ---|--- Advisory Severity: | Important CVSSv3 Range: | 5.9-7.5 Synopsis: | VMware NSX updates address multiple vulnerabilities CVE-2025-22243, CVE-2025-22244, CVE-2025-22245 Issue date: | 2025-06-04 Updated on: | 2025-07-18 Initial Advisory CVEs | CVE-2025-22243,...

VMSA-2024-0020:VMware NSX updates address multiple vulnerabilities (CVE-2024-38818, CVE-2024-38817, CVE-2024-38815)

Advisory ID: | VMSA-2024-0020 ---|--- Advisory Severity: | Moderate CVSSv3 Range: | 4.3-6.7 Synopsis: | VMware NSX updates address multiple vulnerabilities CVE-2024-38818, CVE-2024-38817, CVE-2024-38815 Issue date: | 2024-10-09 Updated on: | 2024-10-09 Initial Advisory CVEs | CVE-2024-38818,...

VMSA-2024-0019:VMware vCenter Server updates address heap-overflow and privilege escalation vulnerabilities (CVE-2024-38812, CVE-2024-38813)

Advisory ID: | VMSA-2024-0019.3 ---|--- Severity: | Critical CVSSv3 Range: | 7.5-9.8 Synopsis: | VMware vCenter Server updates address heap-overflow and privilege escalation vulnerabilities CVE-2024-38812, CVE-2024-38813 Issue date: | 2024-09-17 Updated on: | 2024-10-21 CVEs | CVE-2024-38812,...

VMSA-2021-0028:VMware Response to Apache Log4j Remote Code Execution Vulnerabilities

Advisory ID: VMSA-2021-0028.13 CVSSv3 Range: 9.0-10.0 Issue Date:2021-12-10 Updated On: 2022-04-14 CVEs: CVE-2021-44228, CVE-2021-45046 Synopsis: VMware Response to Apache Log4j Remote Code Execution Vulnerabilities CVE-2021-44228, CVE-2021-45046 RSS Feed Download PDF Download Text File Share thi...

Horizon DaaS update addresses a broken authentication vulnerability (CVE-2020-3977)

3. Broken authentication vulnerability CVE-2020-3977 Horizon DaaS contains a broken authentication vulnerability due to a flaw in the way it handled the first factor authentication. VMware has evaluated the severity of this issue to be in the Moderate severity range with a maximum CVSSv3 base...

VMware SD-WAN by VeloCloud update addresses information disclosure vulnerability (CVE-2019-5533)

3. Velocloud information disclosure vulnerability CVE-2019-5533 The VeloCloud Orchestrator parameter authorization check mistakenly allows enterprise users to obtain information of Managed Service Provider accounts. VMware has evaluated the severity of this issue to be in the moderate severity...

VMware Workspace ONE Unified Endpoint Management Console (AirWatch Console) update resolves SAML authentication bypass vulnerability

The VMware Workspace ONE Unified Endpoint Management Console AirWatch Console contains a SAML authentication bypass vulnerability which can be leveraged during device enrollment. This vulnerability may allow for a malicious actor to impersonate an authorized SAML session if certificate-based...

VMware AirWatch Agent updates resolve remote code execution vulnerability.

The VMware AirWatch Agent for Android and Windows Mobile devices contain a remote code execution vulnerability in real time File Manager capabilities. This vulnerability may allow for unauthorized creation and execution of files in the Agent sandbox and other publicly accessible directories such ...

VMSA-2026-0003: VMware Fusion updates address privilege escalation vulnerability (CVE-2026-41702)

Advisory ID: | VMSA-2026-0003 ---|--- Advisory Severity: | Important CVSSv3 Range: | 7.8 Synopsis: | VMware Fusion updates address privilege escalation vulnerability CVE-2026-41702 Issue date: | 2026-05-14 Updated on: | 2026-05-14 Initial Advisory CVEs | CVE-2026-41702 1. Impacted Products VMware...

VMSA-2025-0016: VMware vCenter and NSX updates address multiple vulnerabilities (CVE-2025-41250, CVE-2025-41251, CVE-2025-41252)

Advisory ID: | VMSA-2025-0016 ---|--- Advisory Severity: | Important CVSSv3 Range: | 7.5-8.5 Synopsis: | VMware vCenter and NSX updates address multiple vulnerabilities CVE-2025-41250, CVE-2025-41251, CVE-2025-41252 Issue date: | 2025-09-29 Updated on: | 2025-09-29 Initial Advisory CVEs |...

VMSA-2025-0006: VMware Aria Operations updates address a local privilege escalation vulnerability (CVE-2025-22231)

Advisory ID: | VMSA-2025-0006 ---|--- Advisory Severity: | Important CVSSv3 Range: | 7.8 Synopsis: | VMware Aria Operations updates address a local privilege escalation vulnerability CVE-2025-22231 Issue date: | 2025-04-01 Updated on: | 2025-04-01 Initial Advisory CVEs | CVE-2025-22231 1. Impacte...

VMSA-2024-0012:VMware vCenter Server updates address heap-overflow and privilege escalation vulnerabilities (CVE-2024-37079, CVE-2024-37080, CVE-2024-37081)

Advisory ID: | VMSA-2024-0012.1 ---|--- Severity: | Critical CVSSv3 Range: | 7.8-9.8 Synopsis: | VMware vCenter Server updates address heap-overflow and privilege escalation vulnerabilities CVE-2024-37079, CVE-2024-37080, CVE-2024-37081 Issue date: | 2024-06-17 Updated on: | 2026-01-23 CVEs |...

VMware ESXi 4.1 Update Installer SFCB Authentication Flaw

a. ESXi 4.1 Update Installer SFCB Authentication FlawUnder certain conditions, the ESXi 4.1 installer that upgrades an ESXi 3.5 or ESXi 4.0 host to ESXi 4.1 incorrectly handles the SFCB authentication mode. The result is that SFCB authentication could allow login with any username and password...

VMSA-2024-0011:VMware ESXi, Workstation, Fusion and vCenter Server updates address multiple security vulnerabilities (CVE-2024-22273, CVE-2024-22274, CVE-2024-22275)

Advisory ID: | VMSA-2024-0011.1 ---|--- Advisory Severity: | Important CVSSv3 Range: | 4.9-8.1 Synopsis: | VMware ESXi, Workstation, Fusion and vCenter Server updates address multiple security vulnerabilities CVE-2024-22273, CVE-2024-22274, CVE-2024-22275 Issue date: | 2024-05-21 Issue date: |...

VMware vCenter Server updates address a privilege escalation vulnerability (CVE-2021-22048)

3. VMware vCenter Server IWA privilege escalation vulnerability CVE-2021-22048 The vCenter Server contains a privilege escalation vulnerability in the IWA Integrated Windows Authentication authentication mechanism. VMware has evaluated the severity of this issue to be in the Important severity...

VMSA-2025-0014: VMware vCenter updates address a denial-of-service vulnerability (CVE-2025-41241)

Advisory ID: | VMSA-2025-0014.1 ---|--- Advisory Severity: | Moderate CVSSv3 Range: | 4.4 Synopsis: | VMware vCenter updates address a denial-of-service vulnerability CVE-2025-41241 Issue date: | 2025-07-29 Updated on: | 2025-07-30 CVEs | CVE-2025-41241 1. Impacted Products VMware Cloud Foundatio...

VMware vCenter Server updates address a privilege escalation vulnerability (CVE-2021-22048)

3. VMware vCenter Server IWA privilege escalation vulnerability CVE-2021-22048 The vCenter Server contains a privilege escalation vulnerability in the IWA Integrated Windows Authentication authentication mechanism. VMware has evaluated the severity of this issue to be in the Important severity...

VMSA-2019-0019:VMware ESXi, Workstation and Fusion updates address a denial-of-service vulnerability

VMware Security Advisories Advisory ID| VMSA-2019-0019 ---|--- Advisory Severity| Moderate CVSSv3 Range| 6.3 Synopsis| VMware ESXi, Workstation and Fusion updates address a denial-of-service vulnerability CVE-2019-5536 Issue Date| 2019-10-24 Updated On| 2019-10-24 Initial Advisory CVEs|...

VMSA-2019-0015:VMware Cloud Foundation and VMware Harbor Container Registry for PCF address remote escalation of privilege vulnerability

VMware Security Advisories Advisory ID| VMSA-2019-0015 ---|--- Advisory Severity| Critical CVSSv3 Range| 9.8 Synopsis| VMware Cloud Foundation and VMware Harbor Container Registry for PCF address remote escalation of privilege vulnerability CVE-2019-16097 Issue Date| 2019-09-24 Updated On|...

Unauthenticated Command Injection vulnerability in VMware SD-WAN by VeloCloud

VMware SD-WAN Edge by VeloCloud SD-WAN Edge Unauthenticated Command Injection vulnerability in VMware SD-WAN Edge by VeloCloud VMware SD-WAN Edge by VeloCloud contains a command injection vulnerability in the local web UI component. This component is disabled by default and should not be enabled ...

VMSA-2026-0001: VMware Aria Operations updates address multiple vulnerabilities (CVE-2026-22719, CVE-2026-22720 and CVE-2026-22721)

Advisory ID: | VMSA-2026-0001.1 ---|--- Advisory Severity: | Important CVSSv3 Range: | 6.2 - 8.1 Synopsis: | VMware Aria Operations updates address multiple vulnerabilities CVE-2026-22719, CVE-2026-22720 and CVE-2026-22721 Issue date: | 2026-02-24 Updated on: | 2026-03-03 Updated Advisory CVEs |...

VMSA-2025-0009 : VMware Cloud Foundation updates address multiple vulnerabilities (CVE-2025-41229, CVE-2025-41230, CVE-2025-41231)

Advisory ID: | VMSA-2025-0009 ---|--- Advisory Severity: | Important CVSSv3 Range: | 7.3-8.2 Synopsis: | VMware Cloud Foundation updates address multiple vulnerabilities CVE-2025-41229, CVE-2025-41230, CVE-2025-41231 Issue date: | 2025-05-20 Updated on: | 2025-05-20 Initial Advisory CVEs |...

VMSA-2019-0011:ESXi patches address partial denial of service vulnerability in hostd process

VMware Security Advisories Advisory ID| VMSA-2019-0011.1 ---|--- Advisory Severity| Moderate CVSSv3 Range| 5.3 Synopsis| ESXi patches address partial denial of service vulnerability in hostd process CVE-2019-5528 Issue Date| 2019-07-09 Updated On| 2019-09-03 CVEs| CVE-2019-5528 1. Impacted...

VMware vCenter Server updates address a LDAP certificate validation issue

VMware vCenter Server LDAP certificate validation vulnerability. VMware vCenter Server does not validate the certificate when connecting to a single sign on identity source using LDAPS LDAP over SSL. This applies when connecting to Active Directory as an LDAP Server or OpenLDAP. Exploitation of...

VMSA-2024-0022: VMware Aria Operations updates address multiple vulnerabilities(CVE-2024-38830, CVE-2024-38831, CVE-2024-38832, CVE-2024-38833, CVE-2024-38834)

Advisory ID: | VMSA-2024-0022 ---|--- Advisory Severity: | Important CVSSv3 Range: | 6.5-7.8 Synopsis: | VMware Aria Operations updates address multiple vulnerabilitiesCVE-2024-38830, CVE-2024-38831, CVE-2024-38832, CVE-2024-38833 and CVE-2024-38834 Issue date: | 26 Nov 2024 Updated on: | 26 Nov...

VMSA-2011-0003:Third party component updates for VMware vCenter Server, vCenter Update Manager, ESXi and ESX

VMSA-2011-0003.2 Third party component updates for VMware vCenter Server, vCenter Update Manager, ESXi and ESX VMware Security Advisory VMware Security Advisory Advisory ID: VMSA-2011-0003.2 VMware Security Advisory Synopsis: Third party component updates for VMware vCenter Server, vCenter Update...

VMware Cloud Foundation contains an information disclosure vulnerability due to the logging of plaintext credentials within some log files.

3. Information disclosure vulnerability in VMware Cloud Foundation SDDC Manager CVE-2022-22939 VMware Cloud Foundation contains an information disclosure vulnerability due to logging of credentials in plain-text within multiple log files on the SDDC Manager...

VMSA-2020-0023:VMware ESXi, Workstation, Fusion and NSX-T updates address multiple security vulnerabilities

Advisory ID: VMSA-2020-0023.3 CVSSv3 Range: 5.9 - 9.8 Issue Date:2020-10-20 Updated On: 2020-11-24 CVEs: CVE-2020-3981, CVE-2020-3982, CVE-2020-3992, CVE-2020-3993, CVE-2020-3994, CVE-2020-3995 Synopsis: VMware ESXi, Workstation, Fusion and NSX-T updates address multiple security vulnerabilities...

Product Release Advisory - VMware Tanzu Greenplum Backup and Restore 1.32.2

Product Release Advisory - VMware Tanzu Greenplum Backup and Restore 1.32.2 Advisory ID | TNZ-2025-0406 ---|--- Tanzu Issue Date | 2025-12-19 Updated on | | Highest Score CVE from list below advisory details ---|--- Severity | High CVSS V4 Vector | Unavailable CVSS V4 Score | Unavailable Sev:...

VMSA-2024-0021: VMware HCX addresses an authenticated SQL injection vulnerability (CVE-2024-38814)

Advisory ID: | VMSA-2024-0021 ---|--- Severity: | Important CVSSv3 Range: | 8.8 Synopsis: | VMware HCX addresses an authenticated SQL injection vulnerability CVE-2024-38814 Issue Date: | 2024-10-16 Updated On: | 2024-10-16 Initial Advisory CVEs: | CVE-2024-38814 1. Impacted Products VMware HCX 2...

VMSA-2024-0018:VMware Fusion update addresses a code execution vulnerability (CVE-2024-38811)

Advisory ID: | VMSA-2024-0018 ---|--- Advisory Severity: | Important CVSSv3 Range: | 8.8 Synopsis: | VMware Fusion update addresses a code-execution vulnerability CVE-2024-38811 Issue date: | 2024-09-03 Updated on: | 2024-09-03 Initial Advisory CVEs | CVE-2024-38811 1. Impacted Products VMware...

VMSA-2024-0015: VMware Cloud Director Object Storage Extension addresses an Insertion of Sensitive Information vulnerability (CVE-2024-22276)

Advisory ID: | VMSA-2024-0015 ---|--- Advisory Severity: | Moderate CVSSv3 Range: | 5.3 Synopsis: | VMware Cloud Director Object Storage Extension addresses an Insertion of Sensitive Information vulnerability CVE-2024-22276 Issue Date: | 2024-06-27 Updated On: | 2024-06-27 Initial Advisory CVEs |...

VMSA-2024-0014:VMware Cloud Director addresses an improper privilege management vulnerability (CVE-2024-22272)

Advisory ID: | VMSA-2024-0014 ---|--- Advisory Severity: | Moderate CVSSv3 Range: | 4.9 Synopsis: | VMware Cloud Director addresses an Improper Privilege Management vulnerability CVE-2024-22272 Issue Date: | 2024-06-27 Updated on: | 2024-06-27 CVEs: | CVE-2024-22272 1. Impacted Products VMware...

VMSA-2021-0023:VMware vRealize Orchestrator update addresses open redirect vulnerability

Advisory ID: VMSA-2021-0023.1 CVSSv3 Range: 6.5 Issue Date:2021-10-12 Updated On: 2021-10-13 CVEs: CVE-2021-22036 Synopsis: VMware vRealize Orchestrator update addresses open redirect vulnerability CVE-2021-22036 RSS Feed Download PDF Download Text File Share this page on social media: 1. Impacte...

VMware VirtualCenter Update and ESX 3.5 patch update JRE

a. VirtualCenter and ESX, Oracle Sun JRE update 1.5.032Oracle Sun JRE is updated to version 1.5.032, which addresses multiple security issues that existed in earlier releases of OracleSun JRE.Oracle has documented the CVE identifiers that are addressed in JRE 1.5.032 in the Oracle Java SE Critica...

VMSA-2020-0027:VMware Workspace One Access, Access Connector, Identity Manager, and Identity Manager Connector address command injection vulnerability

Advisory ID: VMSA-2020-0027.2 CVSSv3 Range: 7.2 Issue Date:2020-11-23 Updated On: 2020-12-03 CVEs: CVE-2020-4006 Synopsis: VMware Workspace One Access, Access Connector, Identity Manager, and Identity Manager Connector address command injection vulnerability RSS Feed Download PDF Download Text Fi...

VMSA-2024-0017: VMware Aria Automation updates address SQL-injection vulnerability (CVE-2024-22280)

Advisory ID: | VMSA-2024-0017 ---|--- Advisory Severity: | Important CVSSv3 Range: | 8.5 Synopsis: | VMware Aria Automation updates address SQL-injection vulnerability CVE-2024-22280 Issue date: | 2024-07-10 Updated on: | 2024-07-10 CVEs | CVE-2024-22280 1. Impacted Products VMware Aria Automatio...

VMSA-2020-0020:VMware Workstation, Fusion and Horizon Client updates address multiple security vulnerabilities

Advisory ID: VMSA-2020-0020.1 CVSSv3 Range: 3.8-6.7 Issue Date:2020-09-14 Updated On: 2020-11-19 CVEs: CVE-2020-3980, CVE-2020-3986, CVE-2020-3987, CVE-2020-3988, CVE-2020-3989, CVE-2020-3990 Synopsis: VMware Workstation, Fusion and Horizon Client updates address multiple security vulnerabilities...

VMSA-2020-0007:VMware vRealize Log Insight addresses Cross Site Scripting (XSS) and Open Redirect vulnerabilities

Advisory ID: VMSA-2020-0007.2 CVSSv3 Range: 6.1 - 8.4 Issue Date:2020-04-14 Updated On: 2020-06-24 CVEs: CVE-2020-3953, CVE-2020-3954 Synopsis: VMware vRealize Log Insight addresses Cross Site Scripting XSS and Open Redirect vulnerabilities CVE-2020-3953, CVE-2020-3954 RSS Feed Download PDF...

VMSA-2020-0009:vRealize Operations Application Remote Collector (ARC) addresses Authentication Bypass and Directory Traversal vulnerabilities

Advisory ID: VMSA-2020-0009.1 CVSSv3 Range: 7.5-10.0 Issue Date:2020-05-08 Updated On: 2020-05-15 Initial Advisory CVEs: CVE-2020-11651, CVE-2020-11652 Synopsis: vRealize Operations Application Remote Collector ARC addresses Authentication Bypass and Directory Traversal vulnerabilities...

VMSA-2021-0004:VMware vRealize Operations updates address Server Side Request Forgery and Arbitrary File Write vulnerabilities

Advisory ID: VMSA-2021-0004.2 CVSSv3 Range: 7.2 - 8.6 Issue Date:2021-03-30 Updated On: 2021-08-24 CVEs: CVE-2021-21975, CVE-2021-21983 Synopsis: VMware vRealize Operations updates address Server Side Request Forgery and Arbitrary File Write vulnerabilities CVE-2021-21975, CVE-2021-21983 RSS Feed...

VMSA-2024-0016: VMware Cloud Director Availability addresses an HTML injection vulnerability (CVE-2024-22277)

Advisory ID: | VMSA-2024-0016 ---|--- Severity: | Moderate CVSSv3 Range: | 6.4 Issue date: | 2024-07-04 Updated on: | 2024-07-04 Initial Advisory CVEs | CVE-2024-22277 Synopsis: | VMware Cloud Director Availability addresses an HTML injection vulnerability CVE-2024-22277 1. Impacted Products...

VMSA-2020-0026:VMware ESXi, Workstation and Fusion updates address use-after-free and privilege escalation vulnerabilities

Advisory ID: VMSA-2020-0026.1 CVSSv3 Range: 8.8 - 9.3 Issue Date:2020-11-19 Updated On: 2020-11-24 CVEs: CVE-2020-4004, CVE-2020-4005 Synopsis: VMware ESXi, Workstation and Fusion updates address use-after-free and privilege escalation vulnerabilities CVE-2020-4004, CVE-2020-4005 RSS Feed Downloa...

VMSA-2020-0029:VMware ESXi, Workstation, Fusion and Cloud Foundation updates address a denial of service vulnerability

Advisory ID: VMSA-2020-0029.1 CVSSv3 Range: 3.3 Issue Date:2020-12-17 Updated On: 2021-02-09 CVEs: CVE-2020-3999 Synopsis: VMware ESXi, Workstation, Fusion and Cloud Foundation updates address a denial of service vulnerability CVE-2020-3999 RSS Feed Download PDF Download Text File Share this page...