Read the docs

VMware

Records1182All Threatist records
Exploited (KEV)41In CISA KEV
CVSS critical188CVSS 9.0–10.0
CVSS high460CVSS 7.0–8.9

Exploited now

VMware records in CISA KEV
TI-2026-30225 Broadcom VMWare ESX Insufficient Logging Vulnerability Priority HIGH 71KEV 2026-10-28TI-2026-42442 Broadcom VMware vCenter Path Traversal Vulnerability Priority CRITICAL 100KEV 2026-08-18TI-2021-05093 Omnissa Workspace ONE Server-Side Request Forgery Priority CRITICAL 92KEV 2026-03-09TI-2026-18246 Broadcom VMware Aria Operations Command Injection Vulnerability Priority CRITICAL 94KEV 2026-03-03TI-2024-24610 Broadcom VMware vCenter Server Out-of-bounds Write Vulnerability Priority CRITICAL 100KEV 2026-01-23TI-2025-27491 Broadcom VMware Aria Operations and VMware Tools Privilege Defined with Unsafe Actions Vulnerability Priority CRITICAL 93KEV 2025-10-30

Components

Products in the NVD configurations · select one to filter the records
Workstation 213 records CRITICAL Esxi 140 records CRITICAL Cloud Foundation 135 records CRITICAL Fusion 131 records CRITICAL Player 89 records HIGH Esx 86 records CRITICAL Spring Framework 83 records CRITICAL Vcenter Server 81 records CRITICAL

Records

15 records in Vrealize Log Insight · all components

TI-2022-13624 CVE-2022-31706 · GHSA-653w-r2gq-wv35

Path traversal in vRealize Log Insight

Priority CRITICAL 91

The vRealize Log Insight contains a Directory Traversal Vulnerability.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.87077 Published 2023-01-25 No fix listed CWE-22
TI-2022-13622 CVE-2022-31704 · GHSA-x63f-7pqq-c59r

Improper access control in vRealize Log Insight

Priority CRITICAL 89

The vRealize Log Insight contains a broken access control vulnerability.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.81011 Published 2023-01-25 No fix listed CWE-284
TI-2022-13628 CVE-2022-31711 · GHSA-jpmc-cx3p-xjqg

Information disclosure in vRealize Log Insight

Priority MEDIUM 50

VMware vRealize Log Insight contains an Information Disclosure Vulnerability.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.22304 Published 2023-01-25 No fix listed CWE-200
TI-2022-13621 CVE-2022-31703 · GHSA-v2g5-92j4-qq7q

Path traversal in vRealize Log Insight

Priority MEDIUM 45

The vRealize Log Insight contains a Directory Traversal Vulnerability.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01935 Published 2022-12-14 No fix listed CWE-22
TI-2018-05102 CVE-2018-6980 · GHSA-pvc9-qr25-w7jc

Incorrect authorization in VMware vRealize Log Insight

Priority LOW 35

VMware vRealize Log Insight (4.7.x before 4.7.1 and 4.6.x before 4.6.2) contains a vulnerability due to improper authorization in the user registration method.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01438 Published 2018-11-13 No fix listed CWE-863
TI-2022-13574 CVE-2022-31655 · GHSA-2g25-66rq-pgwq

Cross-site scripting in VMware vRealize Log Insight

Priority LOW 25

VMware vRealize Log Insight in versions prior to 8.8.2 contain a stored cross-site scripting vulnerability due to improper input sanitization in alerts.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00433 Published 2022-07-12 No fix listed CWE-79
TI-2022-13573 CVE-2022-31654 · GHSA-q65w-fc7h-2r6w

Cross-site scripting in VMware vRealize Log Insight

Priority LOW 25

VMware vRealize Log Insight in versions prior to 8.8.2 contain a stored cross-site scripting vulnerability due to improper input sanitization in configurations.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00433 Published 2022-07-12 No fix listed CWE-79
TI-2021-05065 CVE-2021-22021 · GHSA-mw4g-p3x5-fwh9

Cross-site scripting in VMware vRealize Log Insight

Priority LOW 25

VMware vRealize Log Insight (8.x prior to 8.4) contains a Cross Site Scripting (XSS) vulnerability due to improper user input validation.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00468 Published 2021-08-30 No fix listed CWE-79
TI-2020-03451 CVE-2020-3953 · GHSA-5jp2-26h4-r89j

Improper input validation in VMware vRealize Log Insight

Priority LOW 23

Cross Site Scripting (XSS) vulnerability exists in VMware vRealize Log Insight prior to 8.1.0 due to improper Input validation.

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00653 Published 2020-04-15 No fix listed CWE-20
TI-2021-05077 CVE-2021-22035 · GHSA-p728-xw8r-5f6m

Injection in VMware vRealize Log Insight

Priority LOW 21

VMware vRealize Log Insight (8.x prior to 8.6) contains a CSV(Comma Separated Value) injection vulnerability in interactive analytics export function.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00572 Published 2021-10-13 No fix listed CWE-74
Open these records in search →