Catalog
Findings
Filter by record type (vulnerability, fix, incident, intelligence, research), severity, source, stack, and weakness.
- UnknownVMware cloud_foundation Improper Restriction of XML External Entity ReferenceKEVMar 8, 2023
- UnknownVMware cloud_foundation Out-of-bounds WriteKEVFeb 3, 2023
- UnknownVMware vRealize Operations Authentication BypassKEVAug 10, 2022
- UnknownVMware Spring Framework Improper Control of Generation of Code ('Code Injection')KEVMay 31, 2022
- UnknownvSphere Web Client (FLEX/Flash) Unauthorized Arbitrary File Read VulnerabilityKEVMay 31, 2022
- High7.8VMware Multiple Products Privilege Escalation VulnerabilityKEVEPSS 35.5%Apr 6, 2022
- Critical9.8VMware Workspace ONE Access and Identity Manager Server-Side Template Injection VulnerabilityKEVEPSS 100.0%Apr 6, 2022
- Critical9.8Spring Framework JDK 9+ Remote Code Execution VulnerabilityKEVEPSS 99.6%Apr 1, 2022
- Critical9.8VMware Tanzu Spring Cloud Function Remote Code Execution VulnerabilityKEVEPSS 99.9%Apr 1, 2022
- Medium6.5VMware vCenter Server Incorrect Default File Permissions VulnerabilityKEVEPSS 13.3%Mar 29, 2022
- Critical10.0VMware Spring Cloud Gateway Code Injection VulnerabilityKEVEPSS 98.3%Mar 3, 2022
- High7.5Omnissa Workspace ONE Server-Side Request ForgeryKEVEPSS 99.7%Dec 17, 2021
- UnknownvRealize Operations Manager API prior to 8.4 Unauthenticated File WriteKEVOct 7, 2021
- Medium5.3VMware vCenter Server Improper Access ControlKEVEPSS 49.2%Sep 23, 2021
- Critical9.8VMware vCenter Server File Upload VulnerabilityKEVEPSS 100.0%Sep 23, 2021
- UnknownVMware Workspace ONE Access, Identity Manager and vRealize Authentication Bypass VulnerabilityKEVAug 12, 2021
- Critical9.8VMware vCenter Server Improper Input Validation VulnerabilityKEVEPSS 100.0%May 26, 2021
- High7.5VMware Server Side Request Forgery in vRealize Operations Manager APIKEVEPSS 78.0%Mar 31, 2021
- Medium5.3VMware vCenter Server and Cloud Foundation Server Side Request Forgery (SSRF) VulnerabilityKEVEPSS 88.0%Feb 24, 2021
- Critical9.8VMware vCenter Server Remote Code Execution VulnerabilityKEVEPSS 99.9%Feb 24, 2021
- Critical9.1Multiple VMware Products Command Injection VulnerabilityKEVEPSS 17.3%Nov 23, 2020
- Critical9.8VMware ESXi OpenSLP Use-After-Free VulnerabilityKEVEPSS 83.0%Oct 20, 2020
- High7.5VMware Tanzu Spring Cloud Config Directory Traversal VulnerabilityKEVEPSS 95.6%Jun 2, 2020
- Critical9.8VMware vCenter Server Information Disclosure VulnerabilityKEVEPSS 90.4%Apr 10, 2020
- High7.8VMware Multiple Products Privilege Escalation VulnerabilityKEVEPSS 7.3%Mar 17, 2020