VMware

Records1182All Threatist records

Exploited (KEV)41In CISA KEV

CVSS critical188CVSS 9.0–10.0

CVSS high460CVSS 7.0–8.9

Exploited now

VMware records in CISA KEV

TI-2026-30225 Broadcom VMWare ESX Insufficient Logging Vulnerability HIGH 71KEV 2026-10-28 TI-2026-42442 Broadcom VMware vCenter Path Traversal Vulnerability CRITICAL 100KEV 2026-08-18 TI-2021-05093 Omnissa Workspace ONE Server-Side Request Forgery CRITICAL 92KEV 2026-03-09 TI-2026-18246 Broadcom VMware Aria Operations Command Injection Vulnerability CRITICAL 94KEV 2026-03-03 TI-2024-24610 Broadcom VMware vCenter Server Out-of-bounds Write Vulnerability CRITICAL 100KEV 2026-01-23 TI-2025-27491 Broadcom VMware Aria Operations and VMware Tools Privilege Defined with Unsafe Actions Vulnerability CRITICAL 93KEV 2025-10-30

Components

Products in the NVD configurations · select one to filter the records

Workstation 213 records CRITICAL Esxi 140 records CRITICAL Cloud Foundation 135 records CRITICAL Fusion 131 records CRITICAL Player 89 records HIGH Esx 86 records CRITICAL Spring Framework 83 records CRITICAL Vcenter Server 81 records CRITICAL

Records

8 records in Aria Operations For Networks · all components

TI-2023-07303 CVE-2023-20887 · GHSA-8vx8-r5j3-f2vf

Command injection in Aria Operations for Networks

CRITICAL 100KEV

Aria Operations for Networks contains a command injection vulnerability.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.98281 Published 2023-06-07 No fix listed CWE-77

TI-2023-16905 CVE-2023-34039 · GHSA-hvfm-xp6c-5fc9

Broken or risky cryptographic algorithm in Aria Operations for Networks

HIGH 79

Aria Operations for Networks contains an Authentication Bypass vulnerability due to a lack of unique cryptographic key generation.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.67182 Published 2023-08-29 No fix listed CWE-327

TI-2023-07306 CVE-2023-20890 · GHSA-6gvx-4fmf-52xf

Path traversal in Aria Operations for Networks

MEDIUM 52

Aria Operations for Networks contains an arbitrary file write vulnerability.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.20163 Published 2023-08-29 No fix listed CWE-22

TI-2024-14831 CVE-2024-22241 · GHSA-xqc9-88mp-rfhw

Cross-site scripting in VMware Aria Operations for Networks

MEDIUM 49

Aria Operations for Networks contains a cross site scripting vulnerability.

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.37849 Published 2024-02-06 No fix listed CWE-79

TI-2024-14827 CVE-2024-22237 · GHSA-8xmq-whfm-pq37

Improper privilege management in VMware Aria Operations for Networks

LOW 36

Aria Operations for Networks contains a local privilege escalation vulnerability.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00246 Published 2024-02-06 No fix listed CWE-269

TI-2024-14829 CVE-2024-22239 · GHSA-f5c4-v2h9-f7mq

Improper privilege management in VMware Aria Operations for Networks

LOW 33

Aria Operations for Networks contains a local privilege escalation vulnerability.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00214 Published 2024-02-06 No fix listed CWE-269

TI-2024-14828 CVE-2024-22238 · GHSA-2q4f-xv44-vmqf

Cross-site scripting in VMware Aria Operations for Networks

LOW 29

Aria Operations for Networks contains a cross site scripting vulnerability.

CVSS 3.1MEDIUM 6.4 Network High privileges User interaction EPSS 0.00498 Published 2024-02-06 No fix listed CWE-79

TI-2024-14830 CVE-2024-22240 · GHSA-23h8-ggh4-vmhv

Aria Operations for Networks contains a local file read vulnerability.

LOW 23

Aria Operations for Networks contains a local file read vulnerability.

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.00615 Published 2024-02-06 No fix listed CWE-552

Open these records in search →

Critical	188
High	460
Medium	480
Low	54
No CVSS	0