VMware

Records1182All Threatist records

Exploited (KEV)41In CISA KEV

CVSS critical188CVSS 9.0–10.0

CVSS high460CVSS 7.0–8.9

Exploited now

VMware records in CISA KEV

TI-2026-30225 Broadcom VMWare ESX Insufficient Logging Vulnerability HIGH 71KEV 2026-10-28 TI-2026-42442 Broadcom VMware vCenter Path Traversal Vulnerability CRITICAL 100KEV 2026-08-18 TI-2021-05093 Omnissa Workspace ONE Server-Side Request Forgery CRITICAL 92KEV 2026-03-09 TI-2026-18246 Broadcom VMware Aria Operations Command Injection Vulnerability CRITICAL 94KEV 2026-03-03 TI-2024-24610 Broadcom VMware vCenter Server Out-of-bounds Write Vulnerability CRITICAL 100KEV 2026-01-23 TI-2025-27491 Broadcom VMware Aria Operations and VMware Tools Privilege Defined with Unsafe Actions Vulnerability CRITICAL 93KEV 2025-10-30

Components

Products in the NVD configurations · select one to filter the records

Workstation 213 records CRITICAL Esxi 140 records CRITICAL Cloud Foundation 135 records CRITICAL Fusion 131 records CRITICAL Player 89 records HIGH Esx 86 records CRITICAL Spring Framework 83 records CRITICAL Vcenter Server 81 records CRITICAL

Records

8 records in Esx Server · all components

TI-2010-00655 CVE-2010-0686 · GHSA-398r-4xmm-8gch

WebAccess in VMware VirtualCenter 2.0.2 and 2.5, VMware Server 2.0, and VMware ESX 3.0.3…

LOW 37

WebAccess in VMware VirtualCenter 2.0.2 and 2.5, VMware Server 2.0, and VMware ESX 3.0.3 and 3.5 allows remote attackers to leverage proxy-server functionality to spoof the origin of requests via unspecified vectors, rel…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.0222 Published 2010-04-01 No fix listed CWE-20

TI-2008-02020 CVE-2008-2100 · GHSA-hqvv-32vg-gx63

Multiple buffer overflows in VIX API 1.1.x before 1.1.4 build 93057 on VMware Workstation…

LOW 33

Multiple buffer overflows in VIX API 1.1.x before 1.1.4 build 93057 on VMware Workstation 5.x and 6.x, VMware Player 1.x and 2.x, VMware ACE 2.x, VMware Server 1.x, VMware Fusion 1.x, VMware ESXi 3.5, and VMware ESX 3.0.…

CVSS 2.0HIGH 7.2 Local No auth Interaction — EPSS 0.00598 Published 2008-06-05 No fix listed CWE-119

TI-2008-00927 CVE-2008-0967 · GHSA-w7jw-whgf-5mgf

Untrusted search path vulnerability in vmware-authd in VMware Workstation 5.x before…

LOW 30

Untrusted search path vulnerability in vmware-authd in VMware Workstation 5.x before 5.5.7 build 91707 and 6.x before 6.0.4 build 93057, VMware Player 1.x before 1.0.7 build 91707 and 2.x before 2.0.4 build 93057, and VM…

CVSS 2.0MEDIUM 6.9 Local No auth Interaction — EPSS 0.00356 Published 2008-06-05 No fix listed

TI-2007-01233 CVE-2007-1270 · GHSA-48h8-wf9x-qv92

Double free vulnerability in VMware ESX Server 3.0.0 and 3.0.1 allows attackers to cause…

LOW 28

Double free vulnerability in VMware ESX Server 3.0.0 and 3.0.1 allows attackers to cause a denial of service (crash), obtain sensitive information, or possibly execute arbitrary code via unspecified vectors.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.02615 Published 2007-04-06 No fix listed CWE-189

TI-2010-01096 CVE-2010-1137 · GHSA-mf4m-6x9r-f777

Cross-site scripting (XSS) vulnerability in WebAccess in VMware VirtualCenter 2.0.2 and…

LOW 25

Cross-site scripting (XSS) vulnerability in WebAccess in VMware VirtualCenter 2.0.2 and 2.5 and VMware ESX 3.0.3 and 3.5, and the Server Console in VMware Server 1.0, allows remote attackers to inject arbitrary web scrip…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.0239 Published 2010-04-01 No fix listed CWE-79

TI-2009-03555 CVE-2009-3731 · GHSA-mpjr-rv63-f738

Multiple cross-site scripting (XSS) vulnerabilities in WebWorks Help 2.0 through 5.0 in…

LOW 25

Multiple cross-site scripting (XSS) vulnerabilities in WebWorks Help 2.0 through 5.0 in VMware vCenter 4.0 before Update 1 Build 208156; VMware Server 2.0.2; VMware ESX 4.0; VMware Lab Manager 2.x; VMware vCenter Lab Man…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.02777 Published 2009-12-16 No fix listed CWE-79

TI-2009-02172 CVE-2009-2277 · GHSA-5558-3h54-4jfj

Cross-site scripting (XSS) vulnerability in WebAccess in VMware VirtualCenter 2.0.2 and…

LOW 23

Cross-site scripting (XSS) vulnerability in WebAccess in VMware VirtualCenter 2.0.2 and 2.5 and VMware ESX 3.0.3 and 3.5 allows remote attackers to inject arbitrary web script or HTML via vectors related to "context data…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.0165 Published 2010-04-01 No fix listed CWE-79

TI-2007-05447 CVE-2007-5671 · GHSA-rcvp-7793-9q23

HGFS.sys in the VMware Tools package in VMware Workstation 5.x before 5.5.6 build 80404…

LOW 21

HGFS.sys in the VMware Tools package in VMware Workstation 5.x before 5.5.6 build 80404, VMware Player before 1.0.6 build 80404, VMware ACE before 1.0.5 build 79846, VMware Server before 1.0.5 build 80187, and VMware ESX…

CVSS 2.0MEDIUM 4.4 Local No auth Interaction — EPSS 0.00388 Published 2008-06-05 No fix listed CWE-20

Open these records in search →

Critical	188
High	460
Medium	480
Low	54
No CVSS	0