[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fsu9y-Achd0gJY4kQ7cWnSjjnVXklTtYpXfjqq9ekJQA":3,"g5a-family:vmware\u002Fesx":180,"g5a-ex:vmware\u002Fesx@*":183},{"success":4,"data":5},true,{"product":6,"versions":70,"topVulnerabilitiesByEpss":92,"kevVulnerabilities":150,"seoMetadata":158,"meta":177},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":69},"vmware","esx",21,86,2,"2014-09-25",[14,18,21,23,25,27,29,31,33,35,38,40,42,45,48,51,54,57,60,63,66],{"version":15,"cve_count":11,"kev_count":16,"has_kev":17},"1.5.2",0,false,{"version":19,"cve_count":20,"kev_count":16,"has_kev":17},"2.0",5,{"version":22,"cve_count":20,"kev_count":16,"has_kev":17},"2.0.1",{"version":24,"cve_count":11,"kev_count":16,"has_kev":17},"2.0.2",{"version":26,"cve_count":11,"kev_count":16,"has_kev":17},"2.1",{"version":28,"cve_count":20,"kev_count":16,"has_kev":17},"2.1.1",{"version":30,"cve_count":20,"kev_count":16,"has_kev":17},"2.1.2",{"version":32,"cve_count":11,"kev_count":16,"has_kev":17},"2.1.3",{"version":34,"cve_count":20,"kev_count":16,"has_kev":17},"2.5",{"version":36,"cve_count":37,"kev_count":16,"has_kev":17},"2.5.2",4,{"version":39,"cve_count":11,"kev_count":16,"has_kev":17},"2.5.3",{"version":41,"cve_count":20,"kev_count":16,"has_kev":17},"2.5.4",{"version":43,"cve_count":44,"kev_count":16,"has_kev":17},"2.5.5",7,{"version":46,"cve_count":47,"kev_count":16,"has_kev":17},"3.0.0",8,{"version":49,"cve_count":50,"kev_count":16,"has_kev":17},"3.0.1",10,{"version":52,"cve_count":53,"kev_count":16,"has_kev":17},"3.0.2",9,{"version":55,"cve_count":56,"kev_count":16,"has_kev":17},"3.0.3",16,{"version":58,"cve_count":59,"kev_count":16,"has_kev":17},"3.5",29,{"version":61,"cve_count":62,"kev_count":11,"has_kev":4},"4.0",54,{"version":64,"cve_count":65,"kev_count":11,"has_kev":4},"4.1",47,{"version":67,"cve_count":68,"kev_count":16,"has_kev":17},"5.0",1,"Esx by Vmware is a technology product with 21 tracked versions and 86 known security vulnerabilities including 2 CISA Known Exploited Vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[71,72,73,74,75,76,77,78,79,80,81,82,83,84,85,86,87,88,89,90,91],{"version":15,"cve_count":11,"kev_count":16,"has_kev":17},{"version":19,"cve_count":20,"kev_count":16,"has_kev":17},{"version":22,"cve_count":20,"kev_count":16,"has_kev":17},{"version":24,"cve_count":11,"kev_count":16,"has_kev":17},{"version":26,"cve_count":11,"kev_count":16,"has_kev":17},{"version":28,"cve_count":20,"kev_count":16,"has_kev":17},{"version":30,"cve_count":20,"kev_count":16,"has_kev":17},{"version":32,"cve_count":11,"kev_count":16,"has_kev":17},{"version":34,"cve_count":20,"kev_count":16,"has_kev":17},{"version":36,"cve_count":37,"kev_count":16,"has_kev":17},{"version":39,"cve_count":11,"kev_count":16,"has_kev":17},{"version":41,"cve_count":20,"kev_count":16,"has_kev":17},{"version":43,"cve_count":44,"kev_count":16,"has_kev":17},{"version":46,"cve_count":47,"kev_count":16,"has_kev":17},{"version":49,"cve_count":50,"kev_count":16,"has_kev":17},{"version":52,"cve_count":53,"kev_count":16,"has_kev":17},{"version":55,"cve_count":56,"kev_count":16,"has_kev":17},{"version":58,"cve_count":59,"kev_count":16,"has_kev":17},{"version":61,"cve_count":62,"kev_count":11,"has_kev":4},{"version":64,"cve_count":65,"kev_count":11,"has_kev":4},{"version":67,"cve_count":68,"kev_count":16,"has_kev":17},[93,101,105,112,117,122,129,135,140,144],{"cveId":94,"description":95,"publishedDate":96,"cvssScore":97,"cvssVersion":98,"severity":99,"isKev":4,"epssScore":100},"CVE-2014-6271","GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which allows remote attackers to execute arbitrary code via a crafted environment, as demonstrated by vectors involving the ForceCommand feature in OpenSSH sshd, the mod_cgi and mod_cgid modules in the Apache HTTP Server, scripts executed by unspecified DHCP clients, and other situations in which setting the environment occurs across a privilege boundary from Bash execution, aka \"ShellShock.\"  NOTE: the original fix for this issue was incorrect; CVE-2014-7169 has been assigned to cover the vulnerability that is still present after the incorrect fix.","2014-09-24",9.8,"v3.1","Critical",0.99999,{"cveId":102,"description":103,"publishedDate":12,"cvssScore":97,"cvssVersion":98,"severity":99,"isKev":4,"epssScore":104},"CVE-2014-7169","GNU Bash through 4.3 bash43-025 processes trailing strings after certain malformed function definitions in the values of environment variables, which allows remote attackers to write to files or possibly have unknown other impact via a crafted environment, as demonstrated by vectors involving the ForceCommand feature in OpenSSH sshd, the mod_cgi and mod_cgid modules in the Apache HTTP Server, scripts executed by unspecified DHCP clients, and other situations in which setting the environment occurs across a privilege boundary from Bash execution.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-6271.",0.9994,{"cveId":106,"description":107,"publishedDate":108,"cvssScore":20,"cvssVersion":109,"severity":110,"isKev":17,"epssScore":111},"CVE-2009-3733","Directory traversal vulnerability in VMware Server 1.x before 1.0.10 build 203137 and 2.x before 2.0.2 build 203138 on Linux, VMware ESXi 3.5, and VMware ESX 3.0.3 and 3.5 allows remote attackers to read arbitrary files via unspecified vectors.","2009-11-02","v2","Medium",0.83378,{"cveId":113,"description":114,"publishedDate":115,"cvssScore":50,"cvssVersion":109,"severity":99,"isKev":17,"epssScore":116},"CVE-2007-0063","Integer underflow in the DHCP server in EMC VMware Workstation before 5.5.5 Build 56455 and 6.x before 6.0.1 Build 55017, Player before 1.0.5 Build 56455 and Player 2 before 2.0.1 Build 55017, ACE before 1.0.3 Build 54075 and ACE 2 before 2.0.1 Build 55017, and Server before 1.0.4 Build 56528 allows remote attackers to execute arbitrary code via a malformed DHCP packet that triggers a stack-based buffer overflow.","2007-09-21",0.20413,{"cveId":118,"description":119,"publishedDate":120,"cvssScore":20,"cvssVersion":109,"severity":110,"isKev":17,"epssScore":121},"CVE-2010-3609","The extension parser in slp_v2message.c in OpenSLP 1.2.1, and other versions before SVN revision 1647, as used in Service Location Protocol daemon (SLPD) in VMware ESX 4.0 and 4.1 and ESXi 4.0 and 4.1, allows remote attackers to cause a denial of service (infinite loop) via a packet with a \"next extension offset\" that references this extension or a previous extension.  NOTE: some of these details are obtained from third party information.","2011-03-11",0.17223,{"cveId":123,"description":124,"publishedDate":125,"cvssScore":126,"cvssVersion":98,"severity":127,"isKev":17,"epssScore":128},"CVE-2010-2943","The xfs implementation in the Linux kernel before 2.6.35 does not look up inode allocation btrees before reading inode buffers, which allows remote authenticated users to read unlinked files, or read or overwrite disk blocks that are currently assigned to an active file but were previously assigned to an unlinked file, by accessing a stale NFS filehandle.","2010-09-30",8.1,"High",0.17009,{"cveId":130,"description":131,"publishedDate":132,"cvssScore":133,"cvssVersion":109,"severity":127,"isKev":17,"epssScore":134},"CVE-2007-5360","Buffer overflow in OpenPegasus Management server, when compiled to use PAM and with PEGASUS_USE_PAM_STANDALONE_PROC defined, as used in VMWare ESX Server 3.0.1 and 3.0.2, might allow remote attackers to execute arbitrary code via vectors related to PAM authentication, a different vulnerability than CVE-2008-0003.","2008-01-08",7.5,0.15327,{"cveId":136,"description":137,"publishedDate":138,"cvssScore":20,"cvssVersion":109,"severity":110,"isKev":17,"epssScore":139},"CVE-2006-2481","VMware ESX Server 2.0.x before 2.0.2 and 2.x before 2.5.2 patch 4 stores authentication credentials in base 64 encoded format in the vmware.mui.kid and vmware.mui.sid cookies, which allows attackers to gain privileges by obtaining the cookies using attacks such as cross-site scripting (CVE-2005-3619).","2006-07-31",0.07194,{"cveId":141,"description":142,"publishedDate":115,"cvssScore":50,"cvssVersion":109,"severity":99,"isKev":17,"epssScore":143},"CVE-2007-0061","The DHCP server in EMC VMware Workstation before 5.5.5 Build 56455 and 6.x before 6.0.1 Build 55017, Player before 1.0.5 Build 56455 and Player 2 before 2.0.1 Build 55017, ACE before 1.0.3 Build 54075 and ACE 2 before 2.0.1 Build 55017, and Server before 1.0.4 Build 56528 allows remote attackers to execute arbitrary code via a malformed packet that triggers \"corrupt stack memory.\"",0.06496,{"cveId":145,"description":146,"publishedDate":147,"cvssScore":148,"cvssVersion":109,"severity":127,"isKev":17,"epssScore":149},"CVE-2010-4297","The VMware Tools update functionality in VMware Workstation 6.5.x before 6.5.5 build 328052 and 7.x before 7.1.2 build 301548; VMware Player 2.5.x before 2.5.5 build 328052 and 3.1.x before 3.1.2 build 301548; VMware Server 2.0.2; VMware Fusion 2.x before 2.0.8 build 328035 and 3.1.x before 3.1.2 build 332101; VMware ESXi 3.5, 4.0, and 4.1; and VMware ESX 3.0.3, 3.5, 4.0, and 4.1 allows host OS users to gain privileges on the guest OS via unspecified vectors, related to a \"command injection\" issue.","2010-12-06",7.2,0.0517,[151,156],{"cveId":94,"description":95,"publishedDate":96,"cvssScore":97,"severity":99,"isKev":4,"epssScore":100,"cisaVulnName":152,"cisaDateAdded":153,"cisaShortDescription":154,"cisaRequiredAction":155},"GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability","2022-01-28","GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which allows remote attackers to execute code.","Apply updates per vendor instructions.",{"cveId":102,"description":103,"publishedDate":12,"cvssScore":97,"severity":99,"isKev":4,"epssScore":104,"cisaVulnName":152,"cisaDateAdded":153,"cisaShortDescription":157,"cisaRequiredAction":155},"GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which allows remote attackers to execute code. This CVE correctly remediates the vulnerability in CVE-2014-6271.",{"title":159,"metaDescription":160,"keywords":161,"structuredData":162},"Esx by Vmware - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Esx by Vmware covering 21 versions with 86 tracked vulnerabilities including 2 critical and 0 high-severity issues and 2 CISA KEV vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Esx vulnerabilities, Esx security, Esx CVE, Vmware Esx, Esx threat intelligence, Vmware security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking, Esx KEV, Esx exploited vulnerabilities",{"@context":163,"@type":164,"name":165,"description":160,"url":166,"manufacturer":167,"applicationCategory":171,"softwareVersion":172,"mainEntity":173},"https:\u002F\u002Fschema.org","SoftwareApplication","Esx","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fvmware\u002Fesx",{"@type":168,"name":169,"url":170},"Organization","Vmware","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fvmware","Security Software","21 versions tracked",{"@type":174,"name":175,"description":176,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Esx Security Vulnerabilities","Security vulnerabilities affecting Esx by Vmware",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":178,"apiVersion":179},"2026-10-17T10:55:46.786Z","3.0",[181],{"product":182,"cves":47},"esx_server",{"rows":184,"total":11,"capped":17,"failed":16},[185,189],{"cveId":94,"name":152,"severity":99,"cvss":97,"added":153,"epss":100,"published":186,"ranges":187,"checked":4,"hits":188,"covers":17},"2014-09-24T18:48:04.477",[61,64],[],{"cveId":102,"name":152,"severity":99,"cvss":97,"added":153,"epss":104,"published":190,"ranges":191,"checked":4,"hits":192,"covers":17},"2014-09-25T01:55:04.367",[61,64],[]]