Skip to content
OpenAdvisories

Vendor

VMware

241 known vulnerabilities.

Products

Workstation 51 Fusion 42 ESXi 25 Cloud Foundation 17 Telco Cloud Platform 17 VMware Aria Operations 15 VMware ESXi 14 Telco Cloud Infrastructure 14 Workstation Pro/Player 12 SALT 11 Horizon View Client for Windows 9 VMware Telco Cloud Platform 8 Avi Load Balancer 8 Spring Framework 7 VMware Workstation 7 VMware Fusion 7 vSphere Foundation 7 vCenter Server 6 VMware vCenter Server (vCenter Server) 5 VMware Cloud Foundation (vCenter Server) 5 Fusion Pro / Fusion 5 VMware Cloud Foundation 5 Spring AI 5 VMware tools 4 VMware Telco Cloud Infrastructure 4 VMware Aria Operations for Logs 4 VMware vCenter Server 4 vCenter 4 VCF operations 4 Vmware Aria Automation 3 VMware NSX 3 Airwatch Console 3 vRealize Automation 3 Workstation and Fusion 3 vRealize Operations for Horizon Adapter 3 VMware ESXi, Workstation, and Fusion 3 ESX 3 NSX 2 VMware AirWatch Console (AWC) 2 VMware Avi Load Balancer 2
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • High 8.8
    CVE-2026-22730 Public exploit

    CVE-2026-22730: SQL Injection in Spring AI MariaDBFilterExpressionConverter

    A critical SQL injection vulnerability in Spring AI's MariaDBFilterExpressionConverter allows attackers to bypass metadata-based access controls and execute arbitrary SQL commands. The vulnerability exists due to missing input sanitization.

    VMware Spring AI org.springframework.ai:spring-ai-mariadb-store Maven
  • High 7.8
    CVE-2025-41244 Exploited Public exploit EPSS 16%

    VMSA-2025-0015: VMware Aria Operations and VMware Tools updates address multiple vulnerabilities (CVE-2025-41244,CVE-2025-41245, CVE-2025-41246)

    VMware Aria Operations and VMware Tools contain a local privilege escalation vulnerability. A malicious local actor with non-administrative privileges having access to a VM with VMware Tools installed and managed by Aria Operations with SDMP enabled may explo…

    VMware VMware Aria Operations VMware Telco Cloud Platform VMware Cloud Foundation Debian Ubuntu
    KEV Oct 30, 2025
  • High 7.5
    CVE-2025-41249 Public exploit

    CVE-2025-41249: Spring Framework Annotation Detection Vulnerability

    The Spring Framework annotation detection mechanism may not correctly resolve annotations on methods within type hierarchies with a parameterized super type with unbounded generics. This can be an issue if such annotations are used for authorization decisions…

    VMware Spring Framework libspring-java libspring-java Debian Ubuntu Maven
  • High 8.1
    CVE-2018-6961 Exploited Public exploit EPSS 85%

    VMware NSX SD-WAN Edge by VeloCloud prior to version 3.1.0 contains a command injection vulnerability in the local web …

    VMware NSX SD-WAN by VeloCloud
    KEV Mar 25, 2022