CVEs (135)
CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS |
|---|
1Vmware 2Aria Automation Cloud FoundationJun 17, 2026 Jan 16, 2024 N/A· v4 8.3 HIGH· v3 N/A· v2 Aria Automation contains a Missing Access Control vulnerability.
An authenticated malicious actor may
exploit this vulnerability leading to unauthorized access to remote
organizations and workflows.
|
1Vmware 2Aria Operations Cloud FoundationJun 17, 2026 Sep 27, 2023 N/A· v4 6.7 MEDIUM· v3 N/A· v2 VMware Aria Operations contains a local privilege escalation vulnerability. A malicious actor with administrative access to the local system can escalate privileges to 'root'. |
1Vmware 4Cloud Foundation Identity ManagerIdentity Manager Connector+1 moreJun 17, 2026 May 30, 2023 N/A· v4 6.1 MEDIUM· v3 N/A· v2 VMware Workspace ONE Access and VMware Identity Manager contain an insecure redirect vulnerability. An unauthenticated malicious actor may be able to redirect a victim to an attacker controlled domain due to improper pat...Show more |
1Vmware 2Aria Operations Cloud FoundationJun 17, 2026 May 12, 2023 N/A· v4 6.7 MEDIUM· v3 N/A· v2 VMware Aria Operations contains a privilege escalation vulnerability. A malicious actor with administrative access to the local system can escalate privileges to 'root'. |
1Vmware 2Cloud Foundation Vrealize OperationsJun 17, 2026 May 12, 2023 N/A· v4 6.7 MEDIUM· v3 N/A· v2 VMware Aria Operations contains a Local privilege escalation vulnerability. A malicious actor with administrative privileges in the Aria Operations application can gain root access to the underlying operating system. |
1Vmware 2Cloud Foundation Vrealize OperationsJun 17, 2026 May 12, 2023 N/A· v4 7.2 HIGH· v3 N/A· v2 VMware Aria Operations contains a deserialization vulnerability. A malicious actor with administrative privileges can execute arbitrary commands and disrupt the system. |
1Vmware 2Cloud Foundation Vrealize OperationsJun 17, 2026 May 12, 2023 N/A· v4 8.8 HIGH· v3 N/A· v2 VMware Aria Operations contains a privilege escalation vulnerability. An authenticated malicious user with ReadOnly privileges can perform code execution leading to privilege escalation. |
1Vmware 2Aria Operations For Logs Cloud FoundationJun 17, 2026 Apr 20, 2023 N/A· v4 7.2 HIGH· v3 N/A· v2 VMware Aria Operations for Logs contains a command injection vulnerability. A malicious actor with administrative privileges in VMware Aria Operations for Logs can execute arbitrary commands as root. |
1Vmware 2Aria Operations For Logs Cloud FoundationJun 17, 2026 Apr 20, 2023 N/A· v4 9.8 CRITICAL· v3 N/A· v2 VMware Aria Operations for Logs contains a deserialization vulnerability. An unauthenticated, malicious actor with network access to VMware Aria Operations for Logs may be able to execute arbitrary code as root. |
1Vmware 3Access Cloud FoundationIdentity Manager ConnectorJun 17, 2026 Dec 14, 2022 N/A· v4 5.3 MEDIUM· v3 N/A· v2 VMware Workspace ONE Access and Identity Manager contain a broken authentication vulnerability. VMware has evaluated the severity of this issue to be in the Moderate severity range with a maximum CVSSv3 base score of 5.3...Show more |
1Vmware 3Access Cloud FoundationIdentity ManagerJun 17, 2026 Dec 14, 2022 N/A· v4 7.2 HIGH· v3 N/A· v2 VMware Workspace ONE Access and Identity Manager contain an authenticated remote code execution vulnerability. VMware has evaluated the severity of this issue to be in the Important severity range with a maximum CVSSv3 b...Show more |
VMware ESXi contains a heap-overflow vulnerability. A malicious local actor with restricted privileges within a sandbox process may exploit this issue to achieve a partial information disclosure. |
1Vmware 2Cloud Foundation Vcenter ServerJun 17, 2026 Dec 13, 2022 N/A· v4 5.3 MEDIUM· v3 N/A· v2 The vCenter Server contains a denial-of-service vulnerability in the content library service. A malicious actor with network access to port 443 on vCenter Server may exploit this issue to trigger a denial-of-service cond...Show more |
1Vmware 2Cloud Foundation Vcenter ServerJun 17, 2026 Dec 13, 2022 N/A· v4 5.5 MEDIUM· v3 N/A· v2 The vCenter Server contains an information disclosure vulnerability due to the logging of credentials in plaintext. A malicious actor with access to a workstation that invoked a vCenter Server Appliance ISO operation (In...Show more |
VMware ESXi contains a memory corruption vulnerability that exists in the way it handles a network socket. A malicious actor with local access to ESXi may exploit this issue to corrupt memory leading to an escape of the...Show more |
1Vmware 2Cloud Foundation Nsx Data CenterJun 17, 2026 Oct 28, 2022 N/A· v4 9.1 CRITICAL· v3 N/A· v2 VMware Cloud Foundation (NSX-V) contains an XML External Entity (XXE) vulnerability. On VCF 3.x instances with NSX-V deployed, this may allow a user to exploit this issue leading to a denial-of-service condition or unint...Show more |
VMware ESXi contains a null-pointer deference vulnerability. A malicious actor with privileges within the VMX process only, may create a denial of service condition on the host. |
1Vmware 2Cloud Foundation Vcenter ServerJun 17, 2026 Jul 13, 2022 N/A· v4 7.5 HIGH· v3 N/A· v2 The vCenter Server contains a server-side request forgery (SSRF) vulnerability. A malicious actor with network access to 443 on the vCenter Server may exploit this issue by accessing a URL request outside of vCenter Serv...Show more |
1Vmware 4Cloud Foundation Identity ManagerVrealize Suite Lifecycle Manager+1 moreJun 17, 2026 May 20, 2022 N/A· v4 7.8 HIGH· v3 7.2 HIGH· v2 VMware Workspace ONE Access and Identity Manager contain a privilege escalation vulnerability. A malicious actor with local access can escalate privileges to 'root'. |
1Vmware 5Cloud Foundation Identity ManagerVrealize Automation+2 moreJun 17, 2026 May 20, 2022 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 VMware Workspace ONE Access, Identity Manager and vRealize Automation contain an authentication bypass vulnerability affecting local domain users. A malicious actor with network access to the UI may be able to obtain adm...Show more |