VMware

Records1182All Threatist records

Exploited (KEV)41In CISA KEV

CVSS critical188CVSS 9.0–10.0

CVSS high460CVSS 7.0–8.9

Exploited now

VMware records in CISA KEV

TI-2026-30225 Broadcom VMWare ESX Insufficient Logging Vulnerability HIGH 71KEV 2026-10-28 TI-2026-42442 Broadcom VMware vCenter Path Traversal Vulnerability CRITICAL 100KEV 2026-08-18 TI-2021-05093 Omnissa Workspace ONE Server-Side Request Forgery CRITICAL 92KEV 2026-03-09 TI-2026-18246 Broadcom VMware Aria Operations Command Injection Vulnerability CRITICAL 94KEV 2026-03-03 TI-2024-24610 Broadcom VMware vCenter Server Out-of-bounds Write Vulnerability CRITICAL 100KEV 2026-01-23 TI-2025-27491 Broadcom VMware Aria Operations and VMware Tools Privilege Defined with Unsafe Actions Vulnerability CRITICAL 93KEV 2025-10-30

Components

Products in the NVD configurations · select one to filter the records

Workstation 213 records CRITICAL Esxi 140 records CRITICAL Cloud Foundation 135 records CRITICAL Fusion 131 records CRITICAL Player 89 records HIGH Esx 86 records CRITICAL Spring Framework 83 records CRITICAL Vcenter Server 81 records CRITICAL

Records

8 records in Aria Operations For Logs · all components

TI-2023-07283 CVE-2023-20864 · GHSA-8xj6-cxx5-jf7j

Deserialization of untrusted data in VMware Aria Operations for Logs

CRITICAL 86

VMware Aria Operations for Logs contains a deserialization vulnerability.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.70423 Published 2023-04-20 No fix listed CWE-502

TI-2023-16917 CVE-2023-34051 · GHSA-ghvx-5v39-7hv5

Incorrect authorization in VMware Aria Operations for Logs

HIGH 79

VMware Aria Operations for Logs contains an authentication bypass vulnerability.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.48107 Published 2023-10-20 No fix listed CWE-863

TI-2025-16130 CVE-2025-22219 · GHSA-j5gv-mwmr-ppp5

VMware Aria Operations for Logs stored cross-site scripting vulnerability (CVE-2025-22219)

MEDIUM 42

VMware Aria Operations for Logs contains a stored cross-site scripting vulnerability.

CVSS 3.1CRITICAL 9.0 Network Low privileges User interaction EPSS 0.00661 Published 2025-01-30 Fixed in 8.18.3 CWE-79

TI-2025-16129 CVE-2025-22218 · GHSA-x379-p5q2-7954

VMware Aria Operations for Logs information disclosure vulnerability

MEDIUM 40

VMware Aria Operations for Logs contains an information disclosure vulnerability.

CVSS 3.1HIGH 8.5 Network Low privileges No interaction EPSS 0.00661 Published 2025-01-30 Fixed in 8.18.3 CWE-209

TI-2023-07284 CVE-2023-20865 · GHSA-3frw-92jp-g6w8

Command injection in VMware Aria Operations for Logs

LOW 37

VMware Aria Operations for Logs contains a command injection vulnerability.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.0164 Published 2023-04-20 No fix listed CWE-77

TI-2023-16918 CVE-2023-34052 · GHSA-qrhv-m52g-wcw8

Deserialization of untrusted data in VMware Aria Operations for Logs

LOW 35

VMware Aria Operations for Logs contains a deserialization vulnerability.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00217 Published 2023-10-20 No fix listed CWE-502

TI-2025-16131 CVE-2025-22220 · GHSA-m777-hj92-cw6q

VMware Aria Operations for Logs broken access control vulnerability (CVE-2025-22220)

LOW 26

VMware Aria Operations for Logs contains a privilege escalation vulnerability.

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00322 Published 2025-01-30 Fixed in 8.18.3 CWE-269

TI-2025-16132 CVE-2025-22221 · GHSA-qrcx-78jp-35gm

VMware Aria Operations for Logs stored cross-site scripting vulnerability (CVE-2025-22221)

LOW 24

VMware Aria Operation for Logs contains a stored cross-site scripting vulnerability.

CVSS 3.1MEDIUM 5.2 Network High privileges User interaction EPSS 0.00391 Published 2025-01-30 Fixed in 8.18.3 CWE-79

Open these records in search →