VMware

Records1182All Threatist records

Exploited (KEV)41In CISA KEV

CVSS critical188CVSS 9.0–10.0

CVSS high460CVSS 7.0–8.9

Exploited now

VMware records in CISA KEV

TI-2026-30225 Broadcom VMWare ESX Insufficient Logging Vulnerability HIGH 71KEV 2026-10-28 TI-2026-42442 Broadcom VMware vCenter Path Traversal Vulnerability CRITICAL 100KEV 2026-08-18 TI-2021-05093 Omnissa Workspace ONE Server-Side Request Forgery CRITICAL 92KEV 2026-03-09 TI-2026-18246 Broadcom VMware Aria Operations Command Injection Vulnerability CRITICAL 94KEV 2026-03-03 TI-2024-24610 Broadcom VMware vCenter Server Out-of-bounds Write Vulnerability CRITICAL 100KEV 2026-01-23 TI-2025-27491 Broadcom VMware Aria Operations and VMware Tools Privilege Defined with Unsafe Actions Vulnerability CRITICAL 93KEV 2025-10-30

Components

Products in the NVD configurations · select one to filter the records

Workstation 213 records CRITICAL Esxi 140 records CRITICAL Cloud Foundation 135 records CRITICAL Fusion 131 records CRITICAL Player 89 records HIGH Esx 86 records CRITICAL Spring Framework 83 records CRITICAL Vcenter Server 81 records CRITICAL

Records

18 records in Vrealize Operations · all components

TI-2016-06352 CVE-2016-7457 · GHSA-xm6j-mv8r-9mhp

VMware vRealize Operations (aka vROps) 6.x before 6.4.0 allows remote authenticated users…

MEDIUM 49

VMware vRealize Operations (aka vROps) 6.x before 6.4.0 allows remote authenticated users to gain privileges, or halt and remove virtual machines, via unspecified vectors.

CVSS 3.0CRITICAL 10.0 Network No auth No interaction EPSS 0.03183 Published 2016-12-29 No fix listed CWE-264

TI-2020-03442 CVE-2020-3943 · GHSA-69hc-w7p9-9v7x

vRealize Operations for Horizon Adapter (6.7.x prior to 6.7.1 and 6.6.x prior to 6.6.1)…

MEDIUM 47

vRealize Operations for Horizon Adapter (6.7.x prior to 6.7.1 and 6.6.x prior to 6.6.1) uses a JMX RMI service which is not securely configured.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02331 Published 2020-02-19 Fixed in 6.7.1, 6.6.1

TI-2022-13592 CVE-2022-31673 · GHSA-vw2x-rp6v-f32f

Information disclosure in VMware vRealize Operations

MEDIUM 44

VMware vRealize Operations contains an information disclosure vulnerability.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01803 Published 2022-08-09 No fix listed CWE-200

TI-2023-07293 CVE-2023-20877 · GHSA-ccx6-6vgf-c5rw

Incorrect authorization in VMware Aria Operations

MEDIUM 41

VMware Aria Operations contains a privilege escalation vulnerability.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00652 Published 2023-05-12 No fix listed CWE-863

TI-2016-06357 CVE-2016-7462 · GHSA-v9q7-cmc5-22hj

The Suite REST API in VMware vRealize Operations (aka vROps) 6.x before 6.4.0 allows…

MEDIUM 41

The Suite REST API in VMware vRealize Operations (aka vROps) 6.x before 6.4.0 allows remote authenticated users to write arbitrary content to files or rename files via a crafted DiskFileItem in a relay-request payload th…

CVSS 3.0HIGH 8.5 Network Low privileges No interaction EPSS 0.02045 Published 2016-12-29 No fix listed CWE-264

TI-2023-07275 CVE-2023-20856 · GHSA-6wr9-hw3v-g6rr

Cross-site request forgery in VMware vRealize Operations

MEDIUM 40

VMware vRealize Operations (vROps) contains a CSRF bypass vulnerability.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00404 Published 2023-02-01 No fix listed CWE-352

TI-2020-03443 CVE-2020-3944 · GHSA-9468-5fg2-67xr

Improper authentication in VMware vRealize Operations for Horizon Adapter

MEDIUM 40

vRealize Operations for Horizon Adapter (6.7.x prior to 6.7.1 and 6.6.x prior to 6.6.1) has an improper trust store configuration leading to authentication bypass.

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.01489 Published 2020-02-19 Fixed in 6.7.1, 6.6.1 CWE-287

TI-2023-07294 CVE-2023-20878 · GHSA-6xfq-86q7-v85v

Deserialization of untrusted data in VMware Aria Operations

LOW 36

VMware Aria Operations contains a deserialization vulnerability.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01001 Published 2023-05-12 No fix listed CWE-502

TI-2022-13625 CVE-2022-31707 · GHSA-wf52-hx48-jm6v

Improper privilege management in VMware vRealize Operations

LOW 36

vRealize Operations (vROps) contains a privilege escalation vulnerability.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01025 Published 2022-12-16 No fix listed CWE-269

TI-2020-03444 CVE-2020-3945 · GHSA-hmjr-69rr-r925

vRealize Operations for Horizon Adapter (6.7.x prior to 6.7.1 and 6.6.x prior to 6.6.1)…

LOW 36

vRealize Operations for Horizon Adapter (6.7.x prior to 6.7.1 and 6.6.x prior to 6.6.1) contains an information disclosure vulnerability due to incorrect pairing implementation between the vRealize Operations for Horizon…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01386 Published 2020-02-19 Fixed in 6.7.1, 6.6.1

TI-2022-13591 CVE-2022-31672 · GHSA-5cfp-mpf4-f8hr

Improper privilege management in VMware vRealize Operations

LOW 35

VMware vRealize Operations contains a privilege escalation vulnerability.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00668 Published 2022-08-09 No fix listed CWE-269

TI-2022-13594 CVE-2022-31675 · GHSA-c3wc-hvmq-xmp6

VMware vRealize Operations contains an authentication bypass vulnerability.

LOW 34

VMware vRealize Operations contains an authentication bypass vulnerability.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00856 Published 2022-08-09 No fix listed

TI-2023-07295 CVE-2023-20879 · GHSA-vwrx-67m6-2266

VMware Aria Operations contains a Local privilege escalation vulnerability.

LOW 31

VMware Aria Operations contains a Local privilege escalation vulnerability.

CVSS 3.1MEDIUM 6.7 Local High privileges No interaction EPSS 0.00183 Published 2023-05-12 No fix listed

TI-2018-05100 CVE-2018-6978 · GHSA-6www-r2fm-fcq7

vRealize Operations (7.x before 7.0.0.11287810, 6.7.x before 6.7.0.11286837 and 6.6.x…

LOW 30

vRealize Operations (7.x before 7.0.0.11287810, 6.7.x before 6.7.0.11286837 and 6.6.x before 6.6.1.11286876) contains a local privilege escalation vulnerability due to improper permissions of support scripts.

CVSS 3.0MEDIUM 6.7 Local High privileges No interaction EPSS 0.00331 Published 2018-12-18 No fix listed CWE-732

TI-2022-13626 CVE-2022-31708 · GHSA-456v-qxqw-v893

Improper access control in VMware vRealize Operations

LOW 24

vRealize Operations (vROps) contains a broken access control vulnerability.

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.00848 Published 2022-12-16 No fix listed CWE-284

TI-2022-13601 CVE-2022-31682 · GHSA-jjj6-j55h-4rvh

VMware Aria Operations contains an arbitrary file read vulnerability.

LOW 24

VMware Aria Operations contains an arbitrary file read vulnerability.

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.0072 Published 2022-10-11 No fix listed

TI-2022-13593 CVE-2022-31674 · GHSA-9rcx-r2cj-mhvq

Information disclosure in VMware vRealize Operations

LOW 21

VMware vRealize Operations contains an information disclosure vulnerability.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00662 Published 2022-08-09 No fix listed CWE-200

TI-2021-05075 CVE-2021-22033 · GHSA-r2cc-q3jw-4vhv

Releases prior to VMware vRealize Operations 8.6 contain a Server Side Request Forgery (SSRF) vulnerability.

LOW 15

Releases prior to VMware vRealize Operations 8.6 contain a Server Side Request Forgery (SSRF) vulnerability.

CVSS 3.1LOW 2.7 Network High privileges No interaction EPSS 0.00607 Published 2021-10-13 No fix listed CWE-918

Open these records in search →

Critical	188
High	460
Medium	480
Low	54
No CVSS	0