Skip to content
OpenAdvisories

Category

Virtualization

937 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

10 results · Clear filters · Feed

  • Critical 9.8
    CVE-2026-59310 Exploited · Ransomware Public exploit EPSS 62%

    vCenter directory-traversal vulnerability

    VMware vCenter contains a directory traversal vulnerability in the Syslog server. A malicious actor with network access to vCenter may exploit this issue to execute arbitrary code.

    VMware Cloud Foundation Telco Cloud Platform Telco Cloud Infrastructure Virtualization
    KEV Aug 18, 2026
  • Medium 6.8
    CVE-2024-37085 Exploited · Ransomware Public exploit EPSS 27%

    VMware ESXi contains an authentication bypass vulnerability. A malicious actor with sufficient Active Directory (AD) pe…

    Virtualization
    KEV Jul 30, 2024
  • Medium 6.5
    CVE-2022-22948 Exploited Public exploit EPSS 13%

    The vCenter Server contains an information disclosure vulnerability due to improper permission of files. A malicious ac…

    Virtualization
    KEV Jul 17, 2024
  • Critical 9.8
    CVE-2021-22005 Exploited · Ransomware Public exploit EPSS 100%

    The vCenter Server contains an arbitrary file upload vulnerability in the Analytics service. A malicious actor with net…

    Virtualization
    KEV Nov 3, 2021
  • Critical 9.8
    CVE-2021-21985 Exploited · Ransomware Public exploit EPSS 100%

    The vSphere Client (HTML5) contains a remote code execution vulnerability due to lack of input validation in the Virtua…

    Virtualization
    KEV Nov 3, 2021
  • Critical 9.8
    CVE-2021-21972 Exploited · Ransomware Public exploit EPSS 100%

    The vSphere Client (HTML5) contains a remote code execution vulnerability in a vCenter Server plugin. A malicious actor…

    Virtualization
    KEV Nov 3, 2021
  • Medium 5.3
    CVE-2021-21973 Exploited Public exploit EPSS 88%

    The vSphere Client (HTML5) contains an SSRF (Server Side Request Forgery) vulnerability due to improper validation of U…

    Virtualization
    KEV Mar 7, 2022
  • Critical 9.8
    CVE-2020-3992 Exploited · Ransomware Public exploit EPSS 83%

    OpenSLP as used in VMware ESXi (7.0 before ESXi_7.0.1-0.0.16850804, 6.7 before ESXi670-202010401-SG, 6.5 before ESXi650…

    Virtualization
    KEV Nov 3, 2021
  • Critical 9.8
    CVE-2020-3952 Exploited Public exploit EPSS 90%

    Under certain conditions, vmdir that ships with VMware vCenter Server, as part of an embedded or external Platform Serv…

    Virtualization
    KEV Nov 3, 2021
  • Critical 9.8
    CVE-2019-5544 Exploited · Ransomware Public exploit EPSS 98%

    OpenSLP as used in ESXi and the Horizon DaaS appliances has a heap overwrite issue. VMware has evaluated the severity o…

    openslp-dfsg Virtualization Ubuntu
    KEV Nov 3, 2021