CVE-2023-34060

The CVE-2023-34060 entry concerns VMware Cloud Director Appliance. On upgrades to version 10.5, an authentication bypass can be triggered by a remote actor with network access to the appliance, bypassing login restrictions on ports 22 (SSH) or 5480 (appliance management). The bypass does not appl...

CVE-2024-22256

CVE-2024-22256 affects VMware Cloud Director. The vulnerability is a partial information disclosure that could allow a malicious actor to gather information about organization names based on the instance’s behavior. According to VMware’s advisory and related sources, the issue has a CVSSv3 base s...

CVE-2024-22277

CVE-2024-22277 affects VMware Cloud Director Availability. An HTML injection vulnerability allows a network-authenticated attacker to craft malicious HTML tags that execute within replication tasks. The issue is addressed by VMware in the 4.7.2 release; advisory indicates affected product lines i...