[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fCk9UFUv_x69Z-aWeGCGhp_p75zA1NIC1zs2lff4uyjI":3,"g5a-family:vmware\u002Fcloud_foundation":415,"g5a-ex:vmware\u002Fcloud_foundation@*":418},{"success":4,"data":5},true,{"product":6,"versions":157,"topVulnerabilitiesByEpss":224,"kevVulnerabilities":280,"seoMetadata":394,"meta":413},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":156},"vmware","cloud_foundation",66,121,18,"2025-09-29",[14,18,20,22,24,26,28,30,32,34,36,38,40,42,44,46,48,50,52,54,58,61,63,65,68,70,72,74,76,78,81,83,85,87,89,91,93,95,97,99,101,105,108,110,112,114,116,118,120,122,124,126,128,130,132,134,136,138,140,142,144,146,148,150,152,154],{"version":15,"cve_count":16,"kev_count":16,"has_kev":17},"2.1.3",0,false,{"version":19,"cve_count":16,"kev_count":16,"has_kev":17},"2.1.3a",{"version":21,"cve_count":16,"kev_count":16,"has_kev":17},"2.1.3b",{"version":23,"cve_count":16,"kev_count":16,"has_kev":17},"2.1.3c",{"version":25,"cve_count":16,"kev_count":16,"has_kev":17},"2.2",{"version":27,"cve_count":16,"kev_count":16,"has_kev":17},"2.2.0.1",{"version":29,"cve_count":16,"kev_count":16,"has_kev":17},"2.2.0.2",{"version":31,"cve_count":16,"kev_count":16,"has_kev":17},"2.2.1",{"version":33,"cve_count":16,"kev_count":16,"has_kev":17},"2.2.1.1",{"version":35,"cve_count":16,"kev_count":16,"has_kev":17},"2.3.0",{"version":37,"cve_count":16,"kev_count":16,"has_kev":17},"2.3.1",{"version":39,"cve_count":16,"kev_count":16,"has_kev":17},"2.3.2",{"version":41,"cve_count":16,"kev_count":16,"has_kev":17},"2.3.2.1",{"version":43,"cve_count":16,"kev_count":16,"has_kev":17},"2.3.2.2",{"version":45,"cve_count":16,"kev_count":16,"has_kev":17},"2.3.2.3",{"version":47,"cve_count":16,"kev_count":16,"has_kev":17},"2.3.2.4",{"version":49,"cve_count":16,"kev_count":16,"has_kev":17},"2.3.2.5",{"version":51,"cve_count":16,"kev_count":16,"has_kev":17},"2.3.2.6",{"version":53,"cve_count":16,"kev_count":16,"has_kev":17},"2.3.2.7",{"version":55,"cve_count":56,"kev_count":57,"has_kev":4},"3.0",6,1,{"version":59,"cve_count":60,"kev_count":57,"has_kev":4},"3.0.1",5,{"version":62,"cve_count":60,"kev_count":57,"has_kev":4},"3.0.1.1",{"version":64,"cve_count":56,"kev_count":57,"has_kev":4},"3.10",{"version":66,"cve_count":67,"kev_count":16,"has_kev":17},"3.10.1",3,{"version":69,"cve_count":67,"kev_count":16,"has_kev":17},"3.10.1.1",{"version":71,"cve_count":67,"kev_count":16,"has_kev":17},"3.10.1.2",{"version":73,"cve_count":57,"kev_count":16,"has_kev":17},"3.10.2",{"version":75,"cve_count":67,"kev_count":16,"has_kev":17},"3.10.2.1",{"version":77,"cve_count":67,"kev_count":16,"has_kev":17},"3.10.2.2",{"version":79,"cve_count":80,"kev_count":16,"has_kev":17},"3.11",4,{"version":82,"cve_count":57,"kev_count":16,"has_kev":17},"3.11.0.1",{"version":84,"cve_count":60,"kev_count":57,"has_kev":4},"3.5",{"version":86,"cve_count":60,"kev_count":57,"has_kev":4},"3.5.1",{"version":88,"cve_count":60,"kev_count":57,"has_kev":4},"3.7",{"version":90,"cve_count":60,"kev_count":57,"has_kev":4},"3.7.1",{"version":92,"cve_count":60,"kev_count":57,"has_kev":4},"3.7.2",{"version":94,"cve_count":60,"kev_count":57,"has_kev":4},"3.8",{"version":96,"cve_count":60,"kev_count":57,"has_kev":4},"3.8.1",{"version":98,"cve_count":60,"kev_count":57,"has_kev":4},"3.9",{"version":100,"cve_count":60,"kev_count":57,"has_kev":4},"3.9.1",{"version":102,"cve_count":103,"kev_count":104,"has_kev":4},"4.0",10,2,{"version":106,"cve_count":107,"kev_count":104,"has_kev":4},"4.0.1",9,{"version":109,"cve_count":56,"kev_count":16,"has_kev":17},"4.1",{"version":111,"cve_count":56,"kev_count":16,"has_kev":17},"4.1.0.1",{"version":113,"cve_count":80,"kev_count":16,"has_kev":17},"4.2",{"version":115,"cve_count":56,"kev_count":16,"has_kev":17},"4.2.1",{"version":117,"cve_count":80,"kev_count":16,"has_kev":17},"4.3",{"version":119,"cve_count":80,"kev_count":16,"has_kev":17},"4.3.1",{"version":121,"cve_count":57,"kev_count":16,"has_kev":17},"4.3.11",{"version":123,"cve_count":80,"kev_count":16,"has_kev":17},"4.4",{"version":125,"cve_count":80,"kev_count":16,"has_kev":17},"4.4.1",{"version":127,"cve_count":80,"kev_count":16,"has_kev":17},"4.4.1.1",{"version":129,"cve_count":57,"kev_count":16,"has_kev":17},"4.5",{"version":131,"cve_count":16,"kev_count":16,"has_kev":17},"4.5.1",{"version":133,"cve_count":16,"kev_count":16,"has_kev":17},"4.5.2",{"version":135,"cve_count":16,"kev_count":16,"has_kev":17},"4.76",{"version":137,"cve_count":104,"kev_count":16,"has_kev":17},"5.0",{"version":139,"cve_count":16,"kev_count":16,"has_kev":17},"5.1",{"version":141,"cve_count":16,"kev_count":16,"has_kev":17},"5.1.1",{"version":143,"cve_count":16,"kev_count":16,"has_kev":17},"5.2",{"version":145,"cve_count":16,"kev_count":16,"has_kev":17},"5.2.1",{"version":147,"cve_count":16,"kev_count":16,"has_kev":17},"5.2.1.1",{"version":149,"cve_count":16,"kev_count":16,"has_kev":17},"5.2.1.2",{"version":151,"cve_count":16,"kev_count":16,"has_kev":17},"5.2.2",{"version":153,"cve_count":16,"kev_count":16,"has_kev":17},"9.0",{"version":155,"cve_count":16,"kev_count":16,"has_kev":17},"9.0.1.0","Cloud Foundation by Vmware is a technology product with 66 tracked versions and 121 known security vulnerabilities including 18 CISA Known Exploited Vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[158,159,160,161,162,163,164,165,166,167,168,169,170,171,172,173,174,175,176,177,178,179,180,181,182,183,184,185,186,187,188,189,190,191,192,193,194,195,196,197,198,199,200,201,202,203,204,205,206,207,208,209,210,211,212,213,214,215,216,217,218,219,220,221,222,223],{"version":15,"cve_count":16,"kev_count":16,"has_kev":17},{"version":19,"cve_count":16,"kev_count":16,"has_kev":17},{"version":21,"cve_count":16,"kev_count":16,"has_kev":17},{"version":23,"cve_count":16,"kev_count":16,"has_kev":17},{"version":25,"cve_count":16,"kev_count":16,"has_kev":17},{"version":27,"cve_count":16,"kev_count":16,"has_kev":17},{"version":29,"cve_count":16,"kev_count":16,"has_kev":17},{"version":31,"cve_count":16,"kev_count":16,"has_kev":17},{"version":33,"cve_count":16,"kev_count":16,"has_kev":17},{"version":35,"cve_count":16,"kev_count":16,"has_kev":17},{"version":37,"cve_count":16,"kev_count":16,"has_kev":17},{"version":39,"cve_count":16,"kev_count":16,"has_kev":17},{"version":41,"cve_count":16,"kev_count":16,"has_kev":17},{"version":43,"cve_count":16,"kev_count":16,"has_kev":17},{"version":45,"cve_count":16,"kev_count":16,"has_kev":17},{"version":47,"cve_count":16,"kev_count":16,"has_kev":17},{"version":49,"cve_count":16,"kev_count":16,"has_kev":17},{"version":51,"cve_count":16,"kev_count":16,"has_kev":17},{"version":53,"cve_count":16,"kev_count":16,"has_kev":17},{"version":55,"cve_count":56,"kev_count":57,"has_kev":4},{"version":59,"cve_count":60,"kev_count":57,"has_kev":4},{"version":62,"cve_count":60,"kev_count":57,"has_kev":4},{"version":64,"cve_count":56,"kev_count":57,"has_kev":4},{"version":66,"cve_count":67,"kev_count":16,"has_kev":17},{"version":69,"cve_count":67,"kev_count":16,"has_kev":17},{"version":71,"cve_count":67,"kev_count":16,"has_kev":17},{"version":73,"cve_count":57,"kev_count":16,"has_kev":17},{"version":75,"cve_count":67,"kev_count":16,"has_kev":17},{"version":77,"cve_count":67,"kev_count":16,"has_kev":17},{"version":79,"cve_count":80,"kev_count":16,"has_kev":17},{"version":82,"cve_count":57,"kev_count":16,"has_kev":17},{"version":84,"cve_count":60,"kev_count":57,"has_kev":4},{"version":86,"cve_count":60,"kev_count":57,"has_kev":4},{"version":88,"cve_count":60,"kev_count":57,"has_kev":4},{"version":90,"cve_count":60,"kev_count":57,"has_kev":4},{"version":92,"cve_count":60,"kev_count":57,"has_kev":4},{"version":94,"cve_count":60,"kev_count":57,"has_kev":4},{"version":96,"cve_count":60,"kev_count":57,"has_kev":4},{"version":98,"cve_count":60,"kev_count":57,"has_kev":4},{"version":100,"cve_count":60,"kev_count":57,"has_kev":4},{"version":102,"cve_count":103,"kev_count":104,"has_kev":4},{"version":106,"cve_count":107,"kev_count":104,"has_kev":4},{"version":109,"cve_count":56,"kev_count":16,"has_kev":17},{"version":111,"cve_count":56,"kev_count":16,"has_kev":17},{"version":113,"cve_count":80,"kev_count":16,"has_kev":17},{"version":115,"cve_count":56,"kev_count":16,"has_kev":17},{"version":117,"cve_count":80,"kev_count":16,"has_kev":17},{"version":119,"cve_count":80,"kev_count":16,"has_kev":17},{"version":121,"cve_count":57,"kev_count":16,"has_kev":17},{"version":123,"cve_count":80,"kev_count":16,"has_kev":17},{"version":125,"cve_count":80,"kev_count":16,"has_kev":17},{"version":127,"cve_count":80,"kev_count":16,"has_kev":17},{"version":129,"cve_count":57,"kev_count":16,"has_kev":17},{"version":131,"cve_count":16,"kev_count":16,"has_kev":17},{"version":133,"cve_count":16,"kev_count":16,"has_kev":17},{"version":135,"cve_count":16,"kev_count":16,"has_kev":17},{"version":137,"cve_count":104,"kev_count":16,"has_kev":17},{"version":139,"cve_count":16,"kev_count":16,"has_kev":17},{"version":141,"cve_count":16,"kev_count":16,"has_kev":17},{"version":143,"cve_count":16,"kev_count":16,"has_kev":17},{"version":145,"cve_count":16,"kev_count":16,"has_kev":17},{"version":147,"cve_count":16,"kev_count":16,"has_kev":17},{"version":149,"cve_count":16,"kev_count":16,"has_kev":17},{"version":151,"cve_count":16,"kev_count":16,"has_kev":17},{"version":153,"cve_count":16,"kev_count":16,"has_kev":17},{"version":155,"cve_count":16,"kev_count":16,"has_kev":17},[225,233,237,242,247,253,258,265,270,275],{"cveId":226,"description":227,"publishedDate":228,"cvssScore":229,"cvssVersion":230,"severity":231,"isKev":4,"epssScore":232},"CVE-2021-21985","The vSphere Client (HTML5) contains a remote code execution vulnerability due to lack of input validation in the Virtual SAN Health Check plug-in which is enabled by default in vCenter Server. A malicious actor with network access to port 443 may exploit this issue to execute commands with unrestricted privileges on the underlying operating system that hosts vCenter Server.","2021-05-26",9.8,"v3.1","Critical",0.99999,{"cveId":234,"description":235,"publishedDate":236,"cvssScore":229,"cvssVersion":230,"severity":231,"isKev":4,"epssScore":232},"CVE-2021-22005","The vCenter Server contains an arbitrary file upload vulnerability in the Analytics service. A malicious actor with network access to port 443 on vCenter Server may exploit this issue to execute code on vCenter Server by uploading a specially crafted file.","2021-09-23",{"cveId":238,"description":239,"publishedDate":240,"cvssScore":229,"cvssVersion":230,"severity":231,"isKev":4,"epssScore":241},"CVE-2022-22954","VMware Workspace ONE Access and Identity Manager contain a remote code execution vulnerability due to server-side template injection. A malicious actor with network access can trigger a server-side template injection that may result in remote code execution.","2022-04-11",0.99998,{"cveId":243,"description":244,"publishedDate":245,"cvssScore":229,"cvssVersion":230,"severity":231,"isKev":4,"epssScore":246},"CVE-2021-21972","The vSphere Client (HTML5) contains a remote code execution vulnerability in a vCenter Server plugin. A malicious actor with network access to port 443 may exploit this issue to execute commands with unrestricted privileges on the underlying operating system that hosts vCenter Server. This affects VMware vCenter Server (7.x before 7.0 U1c, 6.7 before 6.7 U3l and 6.5 before 6.5 U3n) and VMware Cloud Foundation (4.x before 4.2 and 3.x before 3.10.1.2).","2021-02-24",0.99865,{"cveId":248,"description":249,"publishedDate":245,"cvssScore":250,"cvssVersion":230,"severity":251,"isKev":4,"epssScore":252},"CVE-2021-21973","The vSphere Client (HTML5) contains an SSRF (Server Side Request Forgery) vulnerability due to improper validation of URLs in a vCenter Server plugin. A malicious actor with network access to port 443 may exploit this issue by sending a POST request to vCenter Server plugin leading to information disclosure. This affects: VMware vCenter Server (7.x before 7.0 U1c, 6.7 before 6.7 U3l and 6.5 before 6.5 U3n) and VMware Cloud Foundation (4.x before 4.2 and 3.x before 3.10.1.2).",5.3,"Medium",0.88012,{"cveId":254,"description":255,"publishedDate":256,"cvssScore":229,"cvssVersion":230,"severity":231,"isKev":4,"epssScore":257},"CVE-2020-3992","OpenSLP as used in VMware ESXi (7.0 before ESXi_7.0.1-0.0.16850804, 6.7 before ESXi670-202010401-SG, 6.5 before ESXi650-202010401-SG) has a use-after-free issue. A malicious actor residing in the management network who has access to port 427 on an ESXi machine may be able to trigger a use-after-free in the OpenSLP service resulting in remote code execution.","2020-10-20",0.83015,{"cveId":259,"description":260,"publishedDate":261,"cvssScore":262,"cvssVersion":230,"severity":263,"isKev":4,"epssScore":264},"CVE-2021-21975","Server Side Request Forgery in vRealize Operations Manager API (CVE-2021-21975) prior to 8.4 may allow a malicious actor with network access to the vRealize Operations Manager API can perform a Server Side Request Forgery attack to steal administrative credentials.","2021-03-31",7.5,"High",0.78001,{"cveId":266,"description":267,"publishedDate":268,"cvssScore":229,"cvssVersion":230,"severity":231,"isKev":17,"epssScore":269},"CVE-2023-20864","VMware Aria Operations for Logs contains a deserialization vulnerability. An unauthenticated, malicious actor with network access to VMware Aria Operations for Logs may be able to execute arbitrary code as root.","2023-04-20",0.70423,{"cveId":271,"description":272,"publishedDate":261,"cvssScore":273,"cvssVersion":230,"severity":251,"isKev":17,"epssScore":274},"CVE-2021-21983","Arbitrary file write vulnerability in vRealize Operations Manager API (CVE-2021-21983) prior to 8.4 may allow an authenticated malicious actor with network access to the vRealize Operations Manager API can write files to arbitrary locations on the underlying photon operating system.",6.5,0.68775,{"cveId":276,"description":277,"publishedDate":278,"cvssScore":229,"cvssVersion":230,"severity":231,"isKev":17,"epssScore":279},"CVE-2022-22972","VMware Workspace ONE Access, Identity Manager and vRealize Automation contain an authentication bypass vulnerability affecting local domain users. A malicious actor with network access to the UI may be able to obtain administrative access without the need to authenticate.","2022-05-20",0.56305,[281,290,298,306,313,320,329,335,344,352,361,365,369,373,377,380,388,391],{"cveId":282,"description":283,"publishedDate":284,"cvssScore":229,"severity":231,"isKev":4,"epssScore":285,"cisaVulnName":286,"cisaDateAdded":287,"cisaShortDescription":288,"cisaRequiredAction":289},"CVE-2024-37079","vCenter Server contains a heap-overflow vulnerability in the implementation of the DCERPC protocol. A malicious actor with network access to vCenter Server may trigger this vulnerability by sending a specially crafted network packet potentially leading to remote code execution.","2024-06-18",0.22377,"Broadcom VMware vCenter Server Out-of-bounds Write Vulnerability","2026-01-23","Broadcom VMware vCenter Server contains an out-of-bounds write vulnerability in the implementation of the DCERPC protocol. This could allow a malicious actor with network access to vCenter Server to send specially crafted network packets, potentially leading to remote code execution.","Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.",{"cveId":291,"description":292,"publishedDate":12,"cvssScore":293,"severity":263,"isKev":4,"epssScore":294,"cisaVulnName":295,"cisaDateAdded":296,"cisaShortDescription":297,"cisaRequiredAction":289},"CVE-2025-41244","VMware Aria Operations and VMware Tools contain a local privilege escalation vulnerability. A malicious local actor with non-administrative privileges having access to a VM with VMware Tools installed and managed by Aria Operations with SDMP enabled may exploit this vulnerability to escalate privileges to root on the same VM.",7.8,0.08438,"Broadcom VMware Aria Operations and VMware Tools Privilege Defined with Unsafe Actions Vulnerability","2025-10-30","Broadcom VMware Aria Operations and VMware Tools contain a privilege defined with unsafe actions vulnerability. A malicious local actor with non-administrative privileges having access to a VM with VMware Tools installed and managed by Aria Operations with SDMP enabled may exploit this vulnerability to escalate privileges to root on the same VM.",{"cveId":299,"description":300,"publishedDate":301,"cvssScore":302,"severity":263,"isKev":4,"epssScore":303,"cisaVulnName":304,"cisaDateAdded":301,"cisaShortDescription":305,"cisaRequiredAction":289},"CVE-2025-22225","VMware ESXi contains an arbitrary write vulnerability. A malicious actor with privileges within the VMX process may trigger an arbitrary kernel write leading to an escape of the sandbox.","2025-03-04",8.2,0.01016,"VMware ESXi Arbitrary Write Vulnerability","VMware ESXi contains an arbitrary write vulnerability. Successful exploitation allows an attacker with privileges within the VMX process to trigger an arbitrary kernel write leading to an escape of the sandbox.",{"cveId":307,"description":308,"publishedDate":301,"cvssScore":309,"severity":231,"isKev":4,"epssScore":310,"cisaVulnName":311,"cisaDateAdded":301,"cisaShortDescription":312,"cisaRequiredAction":289},"CVE-2025-22224","VMware ESXi, and Workstation contain a TOCTOU (Time-of-Check Time-of-Use) vulnerability that leads to an out-of-bounds write. A malicious actor with local administrative privileges on a virtual machine may exploit this issue to execute code as the virtual machine's VMX process running on the host.",9.3,0.01561,"VMware ESXi and Workstation TOCTOU Race Condition Vulnerability","VMware ESXi and Workstation contain a time-of-check time-of-use (TOCTOU) race condition vulnerability that leads to an out-of-bounds write. Successful exploitation enables an attacker with local administrative privileges on a virtual machine to execute code as the virtual machine's VMX process running on the host.",{"cveId":314,"description":315,"publishedDate":301,"cvssScore":316,"severity":263,"isKev":4,"epssScore":317,"cisaVulnName":318,"cisaDateAdded":301,"cisaShortDescription":319,"cisaRequiredAction":289},"CVE-2025-22226","VMware ESXi, Workstation, and Fusion contain an information disclosure vulnerability due to an out-of-bounds read in HGFS. A malicious actor with administrative privileges to a virtual machine may be able to exploit this issue to leak memory from the vmx process.",7.1,0.01769,"VMware ESXi, Workstation, and Fusion Information Disclosure Vulnerability","VMware ESXi, Workstation, and Fusion contain an information disclosure vulnerability due to an out-of-bounds read in HGFS. Successful exploitation allows an attacker with administrative privileges to a virtual machine to leak memory from the vmx process.",{"cveId":321,"description":322,"publishedDate":323,"cvssScore":262,"severity":263,"isKev":4,"epssScore":324,"cisaVulnName":325,"cisaDateAdded":326,"cisaShortDescription":327,"cisaRequiredAction":328},"CVE-2024-38813","The vCenter Server contains a privilege escalation vulnerability. A malicious actor with network access to vCenter Server may trigger this vulnerability to escalate privileges to root by sending a specially crafted network packet.","2024-09-17",0.17355,"VMware vCenter Server Privilege Escalation Vulnerability","2024-11-20","VMware vCenter contains an improper check for dropped privileges vulnerability. This vulnerability could allow an attacker with network access to the vCenter Server to escalate privileges to root by sending a specially crafted packet.","Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.",{"cveId":330,"description":331,"publishedDate":323,"cvssScore":229,"severity":231,"isKev":4,"epssScore":332,"cisaVulnName":333,"cisaDateAdded":326,"cisaShortDescription":334,"cisaRequiredAction":328},"CVE-2024-38812","The vCenter Server contains a heap-overflow vulnerability in the implementation of the DCERPC protocol. A malicious actor with network access to vCenter Server may trigger this vulnerability by sending a specially crafted network packet potentially leading to remote code execution.",0.54571,"VMware vCenter Server Heap-Based Buffer Overflow Vulnerability","VMware vCenter Server contains a heap-based buffer overflow vulnerability in the implementation of the DCERPC protocol. This vulnerability could allow an attacker with network access to the vCenter Server to execute remote code by sending a specially crafted packet.",{"cveId":336,"description":337,"publishedDate":338,"cvssScore":339,"severity":251,"isKev":4,"epssScore":340,"cisaVulnName":341,"cisaDateAdded":342,"cisaShortDescription":343,"cisaRequiredAction":328},"CVE-2024-37085","VMware ESXi contains an authentication bypass vulnerability. A malicious actor with sufficient Active Directory (AD) permissions can gain full access to an ESXi host that was previously  configured to use AD for user management https:\u002F\u002Fblogs.vmware.com\u002Fvsphere\u002F2012\u002F09\u002Fjoining-vsphere-hosts-to-active-directory.html  by re-creating the configured AD group ('ESXi Admins' by default) after it was deleted from AD.","2024-06-25",6.8,0.2677,"VMware ESXi Authentication Bypass Vulnerability","2024-07-30","VMware ESXi contains an authentication bypass vulnerability. A malicious actor with sufficient Active Directory (AD) permissions can gain full access to an ESXi host that was previously configured to use AD for user management by re-creating the configured AD group ('ESXi Admins' by default) after it was deleted from AD.",{"cveId":345,"description":346,"publishedDate":347,"cvssScore":273,"severity":251,"isKev":4,"epssScore":348,"cisaVulnName":349,"cisaDateAdded":350,"cisaShortDescription":351,"cisaRequiredAction":328},"CVE-2022-22948","The vCenter Server contains an information disclosure vulnerability due to improper permission of files. A malicious actor with non-administrative access to the vCenter Server may exploit this issue to gain access to sensitive information.","2022-03-29",0.13282,"VMware vCenter Server Incorrect Default File Permissions Vulnerability ","2024-07-17","VMware vCenter Server contains an incorrect default file permissions vulnerability that allows a remote, privileged attacker to gain access to sensitive information.",{"cveId":353,"description":354,"publishedDate":355,"cvssScore":293,"severity":263,"isKev":4,"epssScore":356,"cisaVulnName":357,"cisaDateAdded":358,"cisaShortDescription":359,"cisaRequiredAction":360},"CVE-2022-22960","VMware Workspace ONE Access, Identity Manager and vRealize Automation contain a privilege escalation vulnerability due to improper permissions in support scripts. A malicious actor with local access can escalate privileges to 'root'.","2022-04-13",0.35519,"VMware Multiple Products Privilege Escalation Vulnerability","2022-04-15","VMware Workspace ONE Access, Identity Manager and vRealize Automation contain a privilege escalation vulnerability due to improper permissions in support scripts.","Apply updates per vendor instructions.",{"cveId":238,"description":239,"publishedDate":240,"cvssScore":229,"severity":231,"isKev":4,"epssScore":241,"cisaVulnName":362,"cisaDateAdded":363,"cisaShortDescription":364,"cisaRequiredAction":360},"VMware Workspace ONE Access and Identity Manager Server-Side Template Injection Vulnerability","2022-04-14","VMware Workspace ONE Access and Identity Manager allow for remote code execution due to server-side template injection.",{"cveId":248,"description":249,"publishedDate":245,"cvssScore":250,"severity":251,"isKev":4,"epssScore":252,"cisaVulnName":366,"cisaDateAdded":367,"cisaShortDescription":368,"cisaRequiredAction":360},"VMware vCenter Server and Cloud Foundation Server Side Request Forgery (SSRF) Vulnerability","2022-03-07","VMware vCenter Server and Cloud Foundation Server contain a SSRF vulnerability due to improper validation of URLs in a vCenter Server plugin. This allows for information disclosure.",{"cveId":259,"description":260,"publishedDate":261,"cvssScore":262,"severity":263,"isKev":4,"epssScore":264,"cisaVulnName":370,"cisaDateAdded":371,"cisaShortDescription":372,"cisaRequiredAction":360},"VMware Server Side Request Forgery in vRealize Operations Manager API","2022-01-18","Server Side Request Forgery (SSRF) in vRealize Operations Manager API prior to 8.4 may allow a malicious actor with network access to the vRealize Operations Manager API to perform a SSRF attack to steal administrative credentials.",{"cveId":243,"description":244,"publishedDate":245,"cvssScore":229,"severity":231,"isKev":4,"epssScore":246,"cisaVulnName":374,"cisaDateAdded":375,"cisaShortDescription":376,"cisaRequiredAction":360},"VMware vCenter Server Remote Code Execution Vulnerability","2021-11-03","VMware vCenter Server vSphere Client contains a remote code execution vulnerability in a vCenter Server plugin which allows an attacker with network access to port 443 to execute commands with unrestricted privileges on the underlying operating system.",{"cveId":254,"description":255,"publishedDate":256,"cvssScore":229,"severity":231,"isKev":4,"epssScore":257,"cisaVulnName":378,"cisaDateAdded":375,"cisaShortDescription":379,"cisaRequiredAction":360},"VMware ESXi OpenSLP Use-After-Free Vulnerability","VMware ESXi OpenSLP contains a use-after-free vulnerability that allows an attacker residing in the management network with access to port 427 to perform remote code execution.",{"cveId":381,"description":382,"publishedDate":383,"cvssScore":384,"severity":231,"isKev":4,"epssScore":385,"cisaVulnName":386,"cisaDateAdded":375,"cisaShortDescription":387,"cisaRequiredAction":360},"CVE-2020-4006","VMware Workspace One Access, Access Connector, Identity Manager, and Identity Manager Connector address have a command injection vulnerability.","2020-11-23",9.1,0.17302,"Multiple VMware Products Command Injection Vulnerability","VMware Workspace One Access, Access Connector, Identity Manager, and Identity Manager Connector contain a command injection vulnerability. An attacker with network access to the administrative configurator on port 8443 and a valid password for the configurator administrator account can execute commands with unrestricted privileges on the underlying operating system.",{"cveId":234,"description":235,"publishedDate":236,"cvssScore":229,"severity":231,"isKev":4,"epssScore":232,"cisaVulnName":389,"cisaDateAdded":375,"cisaShortDescription":390,"cisaRequiredAction":360},"VMware vCenter Server File Upload Vulnerability","VMware vCenter Server contains a file upload vulnerability in the Analytics service that allows a user with network access to port 443 to execute code.",{"cveId":226,"description":227,"publishedDate":228,"cvssScore":229,"severity":231,"isKev":4,"epssScore":232,"cisaVulnName":392,"cisaDateAdded":375,"cisaShortDescription":393,"cisaRequiredAction":360},"VMware vCenter Server Improper Input Validation Vulnerability","VMware vSphere Client contains an improper input validation vulnerability in the Virtual SAN Health Check plug-in, which is enabled by default in vCenter Server, which allows for remote code execution.",{"title":395,"metaDescription":396,"keywords":397,"structuredData":398},"Cloud Foundation by Vmware - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Cloud Foundation by Vmware covering 66 versions with 121 tracked vulnerabilities including 9 critical and 6 high-severity issues and 18 CISA KEV vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Cloud Foundation vulnerabilities, Cloud Foundation security, Cloud Foundation CVE, Vmware Cloud Foundation, Cloud Foundation threat intelligence, Vmware security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking, Cloud Foundation KEV, Cloud Foundation exploited vulnerabilities",{"@context":399,"@type":400,"name":401,"description":396,"url":402,"manufacturer":403,"applicationCategory":407,"softwareVersion":408,"mainEntity":409},"https:\u002F\u002Fschema.org","SoftwareApplication","Cloud Foundation","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fvmware\u002Fcloud_foundation",{"@type":404,"name":405,"url":406},"Organization","Vmware","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fvmware","Security Software","66 versions tracked",{"@type":410,"name":411,"description":412,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Cloud Foundation Security Vulnerabilities","Security vulnerabilities affecting Cloud Foundation by Vmware",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":414,"apiVersion":55},"2026-10-17T00:03:16.776Z",[416],{"product":417,"cves":57},"cloud_foundation_operations",{"rows":419,"total":11,"capped":17,"failed":16},[420,425,430,434,438,442,446,450,454,460,465,470,476,480,484,489,493,497],{"cveId":282,"name":286,"severity":231,"cvss":229,"added":287,"epss":285,"published":421,"ranges":422,"checked":4,"hits":424,"covers":17},"2024-06-18T06:15:11.35",[423],"4.0 to before 5.2",[],{"cveId":291,"name":295,"severity":263,"cvss":293,"added":296,"epss":294,"published":426,"ranges":427,"checked":4,"hits":429,"covers":17},"2025-09-29T17:15:30.843",[428],"4.0 to 5.2.2",[],{"cveId":299,"name":304,"severity":263,"cvss":302,"added":301,"epss":303,"published":431,"ranges":432,"checked":4,"hits":433,"covers":17},"2025-03-04T12:15:33.84",[],[],{"cveId":307,"name":311,"severity":231,"cvss":309,"added":301,"epss":310,"published":435,"ranges":436,"checked":4,"hits":437,"covers":17},"2025-03-04T12:15:33.687",[],[],{"cveId":314,"name":318,"severity":263,"cvss":316,"added":301,"epss":317,"published":439,"ranges":440,"checked":4,"hits":441,"covers":17},"2025-03-04T12:15:33.973",[],[],{"cveId":321,"name":325,"severity":263,"cvss":262,"added":326,"epss":324,"published":443,"ranges":444,"checked":4,"hits":445,"covers":17},"2024-09-17T18:15:04.127",[423],[],{"cveId":330,"name":333,"severity":231,"cvss":229,"added":326,"epss":332,"published":447,"ranges":448,"checked":4,"hits":449,"covers":17},"2024-09-17T18:15:03.92",[423],[],{"cveId":336,"name":341,"severity":251,"cvss":339,"added":342,"epss":340,"published":451,"ranges":452,"checked":4,"hits":453,"covers":17},"2024-06-25T15:15:12.377",[423],[],{"cveId":345,"name":349,"severity":251,"cvss":273,"added":350,"epss":348,"published":455,"ranges":456,"checked":4,"hits":459,"covers":17},"2022-03-29T18:15:08.04",[457,458],"3.0 to before 3.11","4.0 to before 4.4.1",[],{"cveId":353,"name":357,"severity":263,"cvss":293,"added":358,"epss":356,"published":461,"ranges":462,"checked":4,"hits":464,"covers":17},"2022-04-13T18:15:13.51",[463],"3.0 to before 5.0",[],{"cveId":238,"name":362,"severity":231,"cvss":229,"added":363,"epss":241,"published":466,"ranges":467,"checked":4,"hits":469,"covers":17},"2022-04-11T20:15:19.89",[468],"4.0 to 4.3.1",[],{"cveId":248,"name":366,"severity":251,"cvss":250,"added":367,"epss":252,"published":471,"ranges":472,"checked":4,"hits":475,"covers":17},"2021-02-24T17:15:15.923",[473,474],"3.0 to before 3.10.1.2","4.0 to before 4.2",[],{"cveId":259,"name":370,"severity":263,"cvss":262,"added":371,"epss":264,"published":477,"ranges":478,"checked":4,"hits":479,"covers":17},"2021-03-31T18:15:14.597",[55,59,62,84,86,88,90,92,94,96,98,100,64,102,106],[],{"cveId":243,"name":374,"severity":231,"cvss":229,"added":375,"epss":246,"published":481,"ranges":482,"checked":4,"hits":483,"covers":17},"2021-02-24T17:15:15.833",[473,474],[],{"cveId":254,"name":378,"severity":231,"cvss":229,"added":375,"epss":257,"published":485,"ranges":486,"checked":4,"hits":488,"covers":17},"2020-10-20T17:15:12.81",[473,487],"4.0 to before 4.1.0.1",[],{"cveId":381,"name":386,"severity":231,"cvss":384,"added":375,"epss":385,"published":490,"ranges":491,"checked":4,"hits":492,"covers":17},"2020-11-23T22:15:12.663",[102,106],[],{"cveId":234,"name":389,"severity":231,"cvss":229,"added":375,"epss":232,"published":494,"ranges":495,"checked":4,"hits":496,"covers":17},"2021-09-23T12:15:07.707",[463],[],{"cveId":226,"name":392,"severity":231,"cvss":229,"added":375,"epss":232,"published":498,"ranges":499,"checked":4,"hits":502,"covers":17},"2021-05-26T15:15:07.937",[500,501],"3.0 to before 3.10.2.1","4.0 to before 4.2.1",[]]