VMware

Records1182All Threatist records

Exploited (KEV)41In CISA KEV

CVSS critical188CVSS 9.0–10.0

CVSS high460CVSS 7.0–8.9

Exploited now

VMware records in CISA KEV

TI-2026-30225 Broadcom VMWare ESX Insufficient Logging Vulnerability HIGH 71KEV 2026-10-28 TI-2026-42442 Broadcom VMware vCenter Path Traversal Vulnerability CRITICAL 100KEV 2026-08-18 TI-2021-05093 Omnissa Workspace ONE Server-Side Request Forgery CRITICAL 92KEV 2026-03-09 TI-2026-18246 Broadcom VMware Aria Operations Command Injection Vulnerability CRITICAL 94KEV 2026-03-03 TI-2024-24610 Broadcom VMware vCenter Server Out-of-bounds Write Vulnerability CRITICAL 100KEV 2026-01-23 TI-2025-27491 Broadcom VMware Aria Operations and VMware Tools Privilege Defined with Unsafe Actions Vulnerability CRITICAL 93KEV 2025-10-30

Components

Products in the NVD configurations · select one to filter the records

Workstation 213 records CRITICAL Esxi 140 records CRITICAL Cloud Foundation 135 records CRITICAL Fusion 131 records CRITICAL Player 89 records HIGH Esx 86 records CRITICAL Spring Framework 83 records CRITICAL Vcenter Server 81 records CRITICAL

Records

10 records in Virtualcenter · all components

TI-2013-01226 CVE-2013-1405 · GHSA-v887-6g7g-j8hv

VMware vCenter Server 4.0 before Update 4b and 4.1 before Update 3a, VMware VirtualCenter…

MEDIUM 48

VMware vCenter Server 4.0 before Update 4b and 4.1 before Update 3a, VMware VirtualCenter 2.5, VMware vSphere Client 4.0 before Update 4b and 4.1 before Update 3a, VMware VI-Client 2.5, VMware ESXi 3.5 through 4.1, and V…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.02803 Published 2013-02-15 No fix listed CWE-287

TI-2009-00743 CVE-2009-0778 · GHSA-2327-m5w2-rg7f

The icmp_send function in net/ipv4/icmp.c in the Linux kernel before 2.6.25, when…

LOW 39

The icmp_send function in net/ipv4/icmp.c in the Linux kernel before 2.6.25, when configured as a router with a REJECT route, does not properly manage the Protocol Independent Destination Cache (aka DST) in some situatio…

CVSS 2.0HIGH 7.1 Network No auth Interaction — EPSS 0.04623 Published 2009-03-12 Fixed

TI-2010-00655 CVE-2010-0686 · GHSA-398r-4xmm-8gch

WebAccess in VMware VirtualCenter 2.0.2 and 2.5, VMware Server 2.0, and VMware ESX 3.0.3…

LOW 37

WebAccess in VMware VirtualCenter 2.0.2 and 2.5, VMware Server 2.0, and VMware ESX 3.0.3 and 3.5 allows remote attackers to leverage proxy-server functionality to spoof the origin of requests via unspecified vectors, rel…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.0222 Published 2010-04-01 No fix listed CWE-20

TI-2008-03366 CVE-2008-3514 · GHSA-2rrj-r6g7-f5gj

VMware VirtualCenter 2.5 before Update 2 and 2.0.2 before Update 5 relies on client-side…

LOW 26

VMware VirtualCenter 2.5 before Update 2 and 2.0.2 before Update 5 relies on client-side "enabled/disabled functionality" for access control, which allows remote attackers to determine valid user names by enabling functi…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01814 Published 2008-08-13 No fix listed CWE-200

TI-2010-01096 CVE-2010-1137 · GHSA-mf4m-6x9r-f777

Cross-site scripting (XSS) vulnerability in WebAccess in VMware VirtualCenter 2.0.2 and…

LOW 25

Cross-site scripting (XSS) vulnerability in WebAccess in VMware VirtualCenter 2.0.2 and 2.5 and VMware ESX 3.0.3 and 3.5, and the Server Console in VMware Server 1.0, allows remote attackers to inject arbitrary web scrip…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.0239 Published 2010-04-01 No fix listed CWE-79

TI-2011-00354 CVE-2011-0426 · GHSA-c4pp-r7mc-7fj9

Directory traversal vulnerability in vCenter Server in VMware vCenter 4.0 before Update 3…

LOW 24

Directory traversal vulnerability in vCenter Server in VMware vCenter 4.0 before Update 3 and 4.1 before Update 1, and VMware VirtualCenter 2.5 before Update 6a, allows remote attackers to read arbitrary files via unspec…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.02147 Published 2011-05-09 No fix listed CWE-22

TI-2009-02172 CVE-2009-2277 · GHSA-5558-3h54-4jfj

Cross-site scripting (XSS) vulnerability in WebAccess in VMware VirtualCenter 2.0.2 and…

LOW 23

Cross-site scripting (XSS) vulnerability in WebAccess in VMware VirtualCenter 2.0.2 and 2.5 and VMware ESX 3.0.3 and 3.5 allows remote attackers to inject arbitrary web script or HTML via vectors related to "context data…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.0165 Published 2010-04-01 No fix listed CWE-79

TI-2009-01026 CVE-2009-1072 · GHSA-pxr6-gr2r-cc6x

nfsd in the Linux kernel before 2.6.28.9 does not drop the CAP_MKNOD capability before…

LOW 23

nfsd in the Linux kernel before 2.6.28.9 does not drop the CAP_MKNOD capability before handling a user request in a thread, which allows local users to create device nodes, as demonstrated on a filesystem that has been e…

CVSS 2.0MEDIUM 4.9 Local No auth Interaction — EPSS 0.00427 Published 2009-03-25 Fixed CWE-16

TI-2006-05772 CVE-2006-5990 · GHSA-jr99-r38w-q3wj

VMWare VirtualCenter client 2.x before 2.0.1 Patch 1 (Build 33643) and 1.4.x before 1.4.1…

LOW 21

VMWare VirtualCenter client 2.x before 2.0.1 Patch 1 (Build 33643) and 1.4.x before 1.4.1 Patch 1 (Build 33425), when server certificate verification is enabled, does not verify the server's X.509 certificate when creati…

CVSS 2.0MEDIUM 4.0 Network No auth Interaction — EPSS 0.00895 Published 2006-11-21 No fix listed CWE-20

TI-2008-04087 CVE-2008-4278 · GHSA-cg7x-wpjc-28wr

VMware VirtualCenter 2.5 before Update 3 build 119838 on Windows displays a user's…

LOW 11

VMware VirtualCenter 2.5 before Update 3 build 119838 on Windows displays a user's password in cleartext when the password contains unspecified special characters, which allows physically proximate attackers to steal the…

CVSS 2.0LOW 2.1 Local No auth Interaction — EPSS 0.00367 Published 2008-10-06 No fix listed CWE-200

Open these records in search →

Critical	188
High	460
Medium	480
Low	54
No CVSS	0