Vmware : Security Vulnerabilities

CVSS Scores Greater Than: 0 1 2 3 4 5 6 7 8 9

Sort Results By : CVE Number Descending CVE Number Ascending CVSS Score Descending Number Of Exploits Descending

#	CVE ID	CWE ID	Vulnerability Type(s)	Publish Date	Update Date	Score	Gained Access Level	Access	Complexity	Authentication	Conf.	Integ.	Avail.
1	CVE-2023-20861			2023-03-23	2023-03-28	0.0	None	???	???	???	???	???	???
In Spring Framework versions 6.0.0 - 6.0.6, 5.3.0 - 5.3.25, 5.2.0.RELEASE - 5.2.22.RELEASE, and older unsupported versions, it is possible for a user to provide a specially crafted SpEL expression that may cause a denial-of-service (DoS) condition.
2	CVE-2023-20859	532		2023-03-23	2023-03-28	0.0	None	???	???	???	???	???	???
In Spring Vault, versions 3.0.x prior to 3.0.2 and versions 2.3.x prior to 2.3.3 and older versions, an application is vulnerable to insertion of sensitive information into a log file when it attempts to revoke a Vault batch token.
3	CVE-2023-20857	306	Bypass	2023-02-28	2023-03-09	0.0	None	???	???	???	???	???	???
VMware Workspace ONE Content contains a passcode bypass vulnerability. A malicious actor, with access to a users rooted device, may be able to bypass the VMware Workspace ONE Content passcode.
4	CVE-2023-20856	352	Bypass CSRF	2023-02-01	2023-02-08	0.0	None	???	???	???	???	???	???
VMware vRealize Operations (vROps) contains a CSRF bypass vulnerability. A malicious user could execute actions on the vROps platform on behalf of the authenticated victim user.
5	CVE-2023-20855	611	Bypass	2023-02-22	2023-03-03	0.0	None	???	???	???	???	???	???
VMware vRealize Orchestrator contains an XML External Entity (XXE) vulnerability. A malicious actor, with non-administrative access to vRealize Orchestrator, may be able to use specially crafted input to bypass XML parsing restrictions leading to access to sensitive information or possible escalation of privileges.
6	CVE-2022-38652	502		2022-11-12	2022-11-16	0.0	None	???	???	???	???	???	???
UNSUPPORTED WHEN ASSIGNED A remote insecure deserialization vulnerability exixsts in VMWare Hyperic Agent 5.8.6. Exploitation of this vulnerability enables a malicious authenticated user to run arbitrary code or malware within a Hyperic Agent instance and its host operating system with the privileges of the Hyperic Agent process (often SYSTEM on Windows platforms). NOTE: prior exploitation of CVE-2022-38650 results in the disclosure of the authentication material required to exploit this vulnerability. NOTE: This vulnerability only affects products that are no longer supported by the maintainer.
7	CVE-2022-38651		Bypass	2022-11-12	2022-11-16	0.0	None	???	???	???	???	???	???
UNSUPPORTED WHEN ASSIGNED A security filter misconfiguration exists in VMware Hyperic Server 5.8.6. Exploitation of this vulnerability enables a malicious party to bypass some authentication requirements when issuing requests to Hyperic Server. NOTE: This vulnerability only affects products that are no longer supported by the maintainer.
8	CVE-2022-38650	502		2022-11-12	2022-11-16	0.0	None	???	???	???	???	???	???
UNSUPPORTED WHEN ASSIGNED A remote unauthenticated insecure deserialization vulnerability exists in VMware Hyperic Server 5.8.6. Exploitation of this vulnerability enables a malicious party to run arbitrary code or malware within Hyperic Server and the host operating system with the privileges of the Hyperic server process. NOTE: This vulnerability only affects products that are no longer supported by the maintainer.
9	CVE-2022-36797		DoS	2023-02-16	2023-03-06	0.0	None	???	???	???	???	???	???
Protection mechanism failure in the Intel(R) Ethernet 500 Series Controller drivers for VMware before version 1.10.0.1 may allow an authenticated user to potentially enable denial of service via local access.
10	CVE-2022-36416			2023-02-16	2023-03-06	0.0	None	???	???	???	???	???	???
Protection mechanism failure in the Intel(R) Ethernet 500 Series Controller drivers for VMware before version 1.10.0.13 may allow an authenticated user to potentially enable escalation of privilege via local access.
11	CVE-2022-31711	200	+Info	2023-01-26	2023-02-01	0.0	None	???	???	???	???	???	???
VMware vRealize Log Insight contains an Information Disclosure Vulnerability. A malicious actor can remotely collect sensitive session and application information without authentication.
12	CVE-2022-31710	502	DoS	2023-01-26	2023-02-01	0.0	None	???	???	???	???	???	???
vRealize Log Insight contains a deserialization vulnerability. An unauthenticated malicious actor can remotely trigger the deserialization of untrusted data which could result in a denial of service.
13	CVE-2022-31708	668		2022-12-16	2022-12-21	0.0	None	???	???	???	???	???	???
vRealize Operations (vROps) contains a broken access control vulnerability. VMware has evaluated the severity of this issue to be in the Moderate severity range with a maximum CVSSv3 base score of 4.4.
14	CVE-2022-31707			2022-12-16	2022-12-21	0.0	None	???	???	???	???	???	???
vRealize Operations (vROps) contains a privilege escalation vulnerability. VMware has evaluated the severity of this issue to be in the Important severity range with a maximum CVSSv3 base score of 7.2.
15	CVE-2022-31706	22	Exec Code Dir. Trav.	2023-01-26	2023-02-01	0.0	None	???	???	???	???	???	???
The vRealize Log Insight contains a Directory Traversal Vulnerability. An unauthenticated, malicious actor can inject files into the operating system of an impacted appliance which can result in remote code execution.
16	CVE-2022-31705	787	Exec Code	2022-12-14	2022-12-19	0.0	None	???	???	???	???	???	???
VMware ESXi, Workstation, and Fusion contain a heap out-of-bounds write vulnerability in the USB 2.0 controller (EHCI). A malicious actor with local administrative privileges on a virtual machine may exploit this issue to execute code as the virtual machine's VMX process running on the host. On ESXi, the exploitation is contained within the VMX sandbox whereas, on Workstation and Fusion, this may lead to code execution on the machine where Workstation or Fusion is installed.
17	CVE-2022-31704		Exec Code	2023-01-26	2023-02-01	0.0	None	???	???	???	???	???	???
The vRealize Log Insight contains a broken access control vulnerability. An unauthenticated malicious actor can remotely inject code into sensitive files of an impacted appliance which can result in remote code execution.
18	CVE-2022-31703	22	Exec Code Dir. Trav.	2022-12-14	2023-03-01	0.0	None	???	???	???	???	???	???
The vRealize Log Insight contains a Directory Traversal Vulnerability. An unauthenticated, malicious actor can inject files into the operating system of an impacted appliance which can result in remote code execution.
19	CVE-2022-31702	77	Exec Code	2022-12-14	2022-12-16	0.0	None	???	???	???	???	???	???
vRealize Network Insight (vRNI) contains a command injection vulnerability present in the vRNI REST API. A malicious actor with network access to the vRNI REST API can execute commands without authentication.
20	CVE-2022-31701	287		2022-12-14	2022-12-20	0.0	None	???	???	???	???	???	???
VMware Workspace ONE Access and Identity Manager contain a broken authentication vulnerability. VMware has evaluated the severity of this issue to be in the Moderate severity range with a maximum CVSSv3 base score of 5.3.
21	CVE-2022-31700		Exec Code	2022-12-14	2022-12-20	0.0	None	???	???	???	???	???	???
VMware Workspace ONE Access and Identity Manager contain an authenticated remote code execution vulnerability. VMware has evaluated the severity of this issue to be in the Important severity range with a maximum CVSSv3 base score of 7.2.
22	CVE-2022-31699	787	Overflow	2022-12-13	2022-12-15	0.0	None	???	???	???	???	???	???
VMware ESXi contains a heap-overflow vulnerability. A malicious local actor with restricted privileges within a sandbox process may exploit this issue to achieve a partial information disclosure.
23	CVE-2022-31698			2022-12-13	2022-12-15	0.0	None	???	???	???	???	???	???
The vCenter Server contains a denial-of-service vulnerability in the content library service. A malicious actor with network access to port 443 on vCenter Server may exploit this issue to trigger a denial-of-service condition by sending a specially crafted header.
24	CVE-2022-31697	312		2022-12-13	2022-12-15	0.0	None	???	???	???	???	???	???
The vCenter Server contains an information disclosure vulnerability due to the logging of credentials in plaintext. A malicious actor with access to a workstation that invoked a vCenter Server Appliance ISO operation (Install/Upgrade/Migrate/Restore) can access plaintext passwords used during that operation.
25	CVE-2022-31696		Mem. Corr.	2022-12-13	2022-12-16	0.0	None	???	???	???	???	???	???
VMware ESXi contains a memory corruption vulnerability that exists in the way it handles a network socket. A malicious actor with local access to ESXi may exploit this issue to corrupt memory leading to an escape of the ESXi sandbox.
26	CVE-2022-31692	863	Bypass	2022-10-31	2023-03-01	0.0	None	???	???	???	???	???	???
Spring Security, versions 5.7 prior to 5.7.5 and 5.6 prior to 5.6.9 could be susceptible to authorization rules bypass via forward or include dispatcher types. Specifically, an application is vulnerable when all of the following are true: The application expects that Spring Security applies security to forward and include dispatcher types. The application uses the AuthorizationFilter either manually or via the authorizeHttpRequests() method. The application configures the FilterChainProxy to apply to forward and/or include requests (e.g. spring.security.filter.dispatcher-types = request, error, async, forward, include). The application may forward or include the request to a higher privilege-secured endpoint.The application configures Spring Security to apply to every dispatcher type via authorizeHttpRequests().shouldFilterAllDispatcherTypes(true)
27	CVE-2022-31691	94	Exec Code	2022-11-04	2022-11-14	0.0	None	???	???	???	???	???	???
Spring Tools 4 for Eclipse version 4.16.0 and below as well as VSCode extensions such as Spring Boot Tools, Concourse CI Pipeline Editor, Bosh Editor and Cloudfoundry Manifest YML Support version 1.39.0 and below all use Snakeyaml library for YAML editing support. This library allows for some special syntax in the YAML that under certain circumstances allows for potentially harmful remote code execution by the attacker.
28	CVE-2022-31690	269		2022-10-31	2023-03-01	0.0	None	???	???	???	???	???	???
Spring Security, versions 5.7 prior to 5.7.5, and 5.6 prior to 5.6.9, and older unsupported versions could be susceptible to a privilege escalation under certain conditions. A malicious user or attacker can modify a request initiated by the Client (via the browser) to the Authorization Server which can lead to a privilege escalation on the subsequent approval. This scenario can happen if the Authorization Server responds with an OAuth2 Access Token Response containing an empty scope list (per RFC 6749, Section 5.1) on the subsequent request to the token endpoint to obtain the access token.
29	CVE-2022-31689	384		2022-11-09	2022-11-10	0.0	None	???	???	???	???	???	???
VMware Workspace ONE Assist prior to 22.10 contains a Session fixation vulnerability. A malicious actor who obtains a valid session token may be able to authenticate to the application using that token.
30	CVE-2022-31688	79	XSS	2022-11-09	2022-11-10	0.0	None	???	???	???	???	???	???
VMware Workspace ONE Assist prior to 22.10 contains a Reflected cross-site scripting (XSS) vulnerability. Due to improper user input sanitization, a malicious actor with some user interaction may be able to inject javascript code in the target user's window.
31	CVE-2022-31687			2022-11-09	2022-11-10	0.0	None	???	???	???	???	???	???
VMware Workspace ONE Assist prior to 22.10 contains a Broken Access Control vulnerability. A malicious actor with network access to Workspace ONE Assist may be able to obtain administrative access without the need to authenticate to the application.
32	CVE-2022-31686	287		2022-11-09	2022-11-10	0.0	None	???	???	???	???	???	???
VMware Workspace ONE Assist prior to 22.10 contains a Broken Authentication Method vulnerability. A malicious actor with network access to Workspace ONE Assist may be able to obtain administrative access without the need to authenticate to the application.
33	CVE-2022-31685	306	Bypass	2022-11-09	2022-11-10	0.0	None	???	???	???	???	???	???
VMware Workspace ONE Assist prior to 22.10 contains an Authentication Bypass vulnerability. A malicious actor with network access to Workspace ONE Assist may be able to obtain administrative access without the need to authenticate to the application.
34	CVE-2022-31682			2022-10-11	2022-10-13	0.0	None	???	???	???	???	???	???
VMware Aria Operations contains an arbitrary file read vulnerability. A malicious actor with administrative privileges may be able to read arbitrary files containing sensitive data.
35	CVE-2022-31681	476	DoS	2022-10-07	2022-10-11	0.0	None	???	???	???	???	???	???
VMware ESXi contains a null-pointer deference vulnerability. A malicious actor with privileges within the VMX process only, may create a denial of service condition on the host.
36	CVE-2022-31680	502	Exec Code	2022-10-07	2022-10-11	0.0	None	???	???	???	???	???	???
The vCenter Server contains an unsafe deserialisation vulnerability in the PSC (Platform services controller). A malicious actor with admin access on vCenter server may exploit this issue to execute arbitrary code on the underlying operating system that hosts the vCenter Server.
37	CVE-2022-31679			2022-09-21	2022-09-22	0.0	None	???	???	???	???	???	???
Applications that allow HTTP PATCH access to resources exposed by Spring Data REST in versions 3.6.0 - 3.5.5, 3.7.0 - 3.7.2, and older unsupported versions, if an attacker knows about the structure of the underlying domain model, they can craft HTTP requests that expose hidden entity attributes.
38	CVE-2022-31678	611		2022-10-28	2022-10-31	0.0	None	???	???	???	???	???	???
VMware Cloud Foundation (NSX-V) contains an XML External Entity (XXE) vulnerability. On VCF 3.x instances with NSX-V deployed, this may allow a user to exploit this issue leading to a denial-of-service condition or unintended information disclosure.
39	CVE-2022-31677	613		2022-08-29	2022-09-07	0.0	None	???	???	???	???	???	???
An Insufficient Session Expiration issue was discovered in the Pinniped Supervisor (before v0.19.0). A user authenticating to Kubernetes clusters via the Pinniped Supervisor could potentially use their access token to continue their session beyond what proper use of their refresh token might allow.
40	CVE-2022-31675	863	Bypass	2022-08-10	2022-08-15	0.0	None	???	???	???	???	???	???
VMware vRealize Operations contains an authentication bypass vulnerability. An unauthenticated malicious actor with network access may be able to create a user with administrative privileges.
41	CVE-2022-31674	532		2022-08-10	2022-08-15	0.0	None	???	???	???	???	???	???
VMware vRealize Operations contains an information disclosure vulnerability. A low-privileged malicious actor with network access can access log files that lead to information disclosure.
42	CVE-2022-31673	668	Exec Code +Info	2022-08-10	2022-08-15	0.0	None	???	???	???	???	???	???
VMware vRealize Operations contains an information disclosure vulnerability. A low-privileged malicious actor with network access can create and leak hex dumps, leading to information disclosure. Successful exploitation can lead to a remote code execution.
43	CVE-2022-31672	269		2022-08-10	2022-08-15	0.0	None	???	???	???	???	???	???
VMware vRealize Operations contains a privilege escalation vulnerability. A malicious actor with administrative network access can escalate privileges to root.
44	CVE-2022-31008	330		2022-10-06	2022-11-07	0.0	None	???	???	???	???	???	???
RabbitMQ is a multi-protocol messaging and streaming broker. In affected versions the shovel and federation plugins perform URI obfuscation in their worker (link) state. The encryption key used to encrypt the URI was seeded with a predictable secret. This means that in case of certain exceptions related to Shovel and Federation plugins, reasonably easily deobfuscatable data could appear in the node log. Patched versions correctly use a cluster-wide secret for that purpose. This issue has been addressed and Patched versions: `3.10.2`, `3.9.18`, `3.8.32` are available. Users unable to upgrade should disable the Shovel and Federation plugins.
45	CVE-2022-22983	522		2022-08-10	2022-08-15	0.0	None	???	???	???	???	???	???
VMware Workstation (16.x prior to 16.2.4) contains an unprotected storage of credentials vulnerability. A malicious actor with local user privileges to the victim machine may exploit this vulnerability leading to the disclosure of user passwords of the remote server connected through VMware Workstation.
46	CVE-2022-22982	918		2022-07-13	2022-07-20	0.0	None	???	???	???	???	???	???
The vCenter Server contains a server-side request forgery (SSRF) vulnerability. A malicious actor with network access to 443 on the vCenter Server may exploit this issue by accessing a URL request outside of vCenter Server or accessing an internal service.
47	CVE-2021-31693			2022-11-29	2023-02-23	0.0	None	???	???	???	???	???	???
VMware Tools for Windows (12.x.y prior to 12.1.5, 11.x.y and 10.x.y) contains a denial-of-service vulnerability in the VM3DMP driver. A malicious actor with local user privileges in the Windows guest OS, where VMware Tools is installed, can trigger a PANIC in the VM3DMP driver leading to a denial-of-service condition in the Windows guest OS.
48	CVE-2009-1143	59	Bypass	2022-11-23	2022-11-28	0.0	None	???	???	???	???	???	???
An issue was discovered in open-vm-tools 2009.03.18-154848. Local users can bypass intended access restrictions on mounting shares via a symlink attack that leverages a realpath race condition in mount.vmhgfs (aka hgfsmounter).
49	CVE-2009-1142	59	+Priv	2022-11-23	2022-11-28	0.0	None	???	???	???	???	???	???
An issue was discovered in open-vm-tools 2009.03.18-154848. Local users can gain privileges via a symlink attack on /tmp files if vmware-user-suid-wrapper is setuid root and the ChmodChownDirectory function is enabled.

Total number of vulnerabilities : 49 Page : 1 (This Page)