Vendor

VMware

241 known vulnerabilities.

Products

Workstation 51 Fusion 42 ESXi 25 Cloud Foundation 17 Telco Cloud Platform 17 VMware Aria Operations 15 VMware ESXi 14 Telco Cloud Infrastructure 14 Workstation Pro/Player 12 SALT 11 Horizon View Client for Windows 9 VMware Telco Cloud Platform 8 Avi Load Balancer 8 Spring Framework 7 VMware Workstation 7 VMware Fusion 7 vSphere Foundation 7 vCenter Server 6 VMware vCenter Server (vCenter Server) 5 VMware Cloud Foundation (vCenter Server) 5 Fusion Pro / Fusion 5 VMware Cloud Foundation 5 Spring AI 5 VMware tools 4 VMware Telco Cloud Infrastructure 4 VMware Aria Operations for Logs 4 VMware vCenter Server 4 vCenter 4 VCF operations 4 Vmware Aria Automation 3 VMware NSX 3 Airwatch Console 3 vRealize Automation 3 Workstation and Fusion 3 vRealize Operations for Horizon Adapter 3 VMware ESXi, Workstation, and Fusion 3 ESX 3 NSX 2 VMware AirWatch Console (AWC) 2 VMware Avi Load Balancer 2

All Critical High Medium Low Exploited only Public exploit

241 results · Feed

Unscored —

CVE-2019-5523

VMware vCloud Director for Service Providers 9.5.x prior to 9.5.0.3 update resolves a Remote Session Hijack vulnerabili…

VMware VMware vCloud Director for Service Providers (vCD)

Apr 1, 2019
Unscored —

CVE-2018-6981 Public exploit

VMware ESXi 6.7 without ESXi670-201811401-BG and VMware ESXi 6.5 without ESXi650-201811301-BG, VMware ESXi 6.0 without …

VMware VMware ESXi, VMware Workstation, and VMware Fusion Virtualization

Dec 4, 2018
Unscored —

CVE-2018-6982

VMware ESXi 6.7 without ESXi670-201811401-BG and VMware ESXi 6.5 without ESXi650-201811301-BG contain uninitialized sta…

VMware VMware ESXi Virtualization

Dec 4, 2018
Unscored —

CVE-2018-6983

VMware Workstation (15.x before 15.0.2 and 14.x before 14.1.5) and Fusion (11.x before 11.0.2 and 10.x before 10.1.5) c…

VMware VMware Workstation and Fusion

Nov 27, 2018
Unscored —

CVE-2018-6980

VMware vRealize Log Insight (4.7.x before 4.7.1 and 4.6.x before 4.6.2) contains a vulnerability due to improper author…

VMware VMware vRealize Log Insight

Nov 13, 2018
Unscored —

CVE-2018-6974

VMware ESXi (6.7 before ESXi670-201810101-SG, 6.5 before ESXi650-201808401-BG, and 6.0 before ESXi600-201808401-BG), Wo…

VMware Workstation Fusion ESXi Virtualization

Oct 16, 2018
Unscored —

CVE-2018-6977

VMware ESXi (6.7, 6.5, 6.0), Workstation (15.x and 14.x) and Fusion (11.x and 10.x) contain a denial-of-service vulnera…

VMware Workstation Fusion ESXi Virtualization

Oct 9, 2018
Unscored —

CVE-2018-6979

The VMware Workspace ONE Unified Endpoint Management Console (A/W Console) 9.7.x prior to 9.7.0.3, 9.6.x prior to 9.6.0…

VMware VMware Workspace ONE Unified Endpoint Management Console (AirWatch Console)

Oct 5, 2018
Unscored —

CVE-2018-6975

The AirWatch Agent for iOS prior to 5.8.1 contains a data protection vulnerability whereby the files and keychain entri…

VMware AirWatch Agent for iOS prior to 5.8.1 iOS

Sep 11, 2018
Unscored —

CVE-2018-6976

The VMware Content Locker for iOS prior to 4.14 contains a data protection vulnerability in the SQLite database. This v…

VMware Content Locker for iOS iOS

Sep 11, 2018
Unscored —

CVE-2018-6973

VMware Workstation (14.x before 14.1.3) and Fusion (10.x before 10.1.3) contain an out-of-bounds write vulnerability in…

VMware Workstation Fusion

Aug 15, 2018
Unscored —

CVE-2018-6970

VMware Horizon 6 (6.x.x before 6.2.7), Horizon 7 (7.x.x before 7.5.1), and Horizon Client (4.x.x and prior before 4.8.1…

VMware VMware Horizon 6, Horizon 7, and Horizon Client

Aug 13, 2018
Unscored —

CVE-2018-6971

VMware Horizon View Agents (7.x.x before 7.5.1) contain a local information disclosure vulnerability due to insecure lo…

VMware Horizon View Agent

Jul 25, 2018
Unscored —

CVE-2018-6972

VMware ESXi (6.7 before ESXi670-201806401-BG, 6.5 before ESXi650-201806401-BG, 6.0 before ESXi600-201806401-BG and 5.5 …

VMware Workstation Fusion ESXi Virtualization

Jul 25, 2018
Unscored —

CVE-2018-6969

VMware Tools (10.x and prior before 10.3.0) contains an out-of-bounds read vulnerability in HGFS. Successful exploitati…

VMware VMware tools

Jul 13, 2018
Unscored —

CVE-2018-6967

VMware ESXi (6.7 before ESXi670-201806401-BG), Workstation (14.x before 14.1.2), and Fusion (10.x before 10.1.2) contai…

VMware VMware ESXi, Workstation, and Fusion Virtualization

Jul 9, 2018
Unscored —

CVE-2018-6965

VMware ESXi (6.7 before ESXi670-201806401-BG), Workstation (14.x before 14.1.2), and Fusion (10.x before 10.1.2) contai…

VMware VMware ESXi, Workstation, and Fusion Virtualization

Jul 9, 2018
Unscored —

CVE-2018-6966

VMware ESXi (6.7 before ESXi670-201806401-BG), Workstation (14.x before 14.1.2), and Fusion (10.x before 10.1.2) contai…

VMware VMware ESXi, Workstation, and Fusion Virtualization

Jul 9, 2018
High 8.1

CVE-2018-6961 Exploited Public exploit Scanner template EPSS 85%

VMware NSX SD-WAN Edge by VeloCloud prior to version 3.1.0 contains a command injection vulnerability in the local web …

VMware NSX SD-WAN by VeloCloud

Jun 11, 2018
KEV Mar 25, 2022
Unscored —

CVE-2018-6968

The VMware AirWatch Agent for Android prior to 8.2 and AirWatch Agent for Windows Mobile prior to 6.5.2 contain a remot…

VMware Airwatch Agent

Jun 11, 2018
Unscored —

CVE-2018-6964

VMware Horizon Client for Linux (4.x before 4.8.0 and prior) contains a local privilege escalation vulnerability due to…

VMware Horizon Client for Linux Linux

May 29, 2018
Unscored —

CVE-2018-6963

VMware Workstation (14.x before 14.1.2) and Fusion (10.x before 10.1.2) contain multiple denial-of-service vulnerabilit…

VMware Workstation Fusion

May 22, 2018
Unscored —

CVE-2018-6962

VMware Fusion (10.x before 10.1.2) contains a signature bypass vulnerability which may lead to a local privilege escala…

VMware Fusion

May 22, 2018
Unscored —

CVE-2017-4952

VMware Xenon 1.x, prior to 1.5.4-CR7_1, 1.5.7_7, 1.5.4-CR6_2, 1.3.7-CR1_2, 1.1.0-CR0-3, 1.1.0-CR3_1,1.4.2-CR4_1, and 1.…

VMware VMware Xenon

May 2, 2018
Unscored —

CVE-2018-6960

VMware Horizon DaaS (7.x before 8.0.0) contains a broken authentication vulnerability that may allow an attacker to byp…

VMware Horizon DaaS

Apr 20, 2018
Unscored —

CVE-2018-6958

VMware vRealize Automation (vRA) prior to 7.3.1 contains a vulnerability that may allow for a DOM-based cross-site scri…

VMware vRealize Automation

Apr 13, 2018
Unscored —

CVE-2018-6959

VMware vRealize Automation (vRA) prior to 7.4.0 contains a vulnerability in the handling of session IDs. Exploitation o…

VMware vRealize Automation

Apr 13, 2018
Unscored —

CVE-2018-6957

VMware Workstation (14.x before 14.1.1, 12.x) and Fusion (10.x before 10.1.1 and 8.x) contain a denial-of-service vulne…

VMware Workstation Fusion

Mar 15, 2018
Unscored —

CVE-2017-4947

VMware vRealize Automation (7.3 and 7.2) and vSphere Integrated Containers (1.x before 1.3) contain a deserialization v…

VMware vRealize Automation vSphere Integrated Containers Virtualization

Jan 29, 2018
Unscored —

CVE-2017-4951

VMware AirWatch Console (9.2.x before 9.2.2 and 9.1.x before 9.1.5) contains a Cross Site Request Forgery vulnerability…

VMware Airwatch Console

Jan 29, 2018
Unscored —

CVE-2017-4949

VMware Workstation and Fusion contain a use-after-free vulnerability in VMware NAT service when IPv6 mode is enabled. T…

VMware Fusion Workstation Pro/Player

Jan 11, 2018
Unscored —

CVE-2017-4950

VMware Workstation and Fusion contain an integer overflow vulnerability in VMware NAT service when IPv6 mode is enabled…

VMware Fusion Workstation Pro/Player

Jan 11, 2018
Unscored —

CVE-2017-4948

VMware Workstation (14.x before 14.1.0 and 12.x) and Horizon View Client (4.x before 4.7.0) contain an out-of-bounds re…

VMware Workstation Horizon Client for Windows Windows

Jan 5, 2018
Unscored —

CVE-2017-4945

VMware Workstation (14.x and 12.x) and Fusion (10.x and 8.x) contain a guest access control vulnerability. This issue m…

VMware Workstation Fusion

Jan 5, 2018
Unscored —

CVE-2017-4946

The VMware V4H and V4PA desktop agents (6.x before 6.5.1) contain a privilege escalation vulnerability. Successful expl…

VMware vRealize Operations for Published Applications (V4PA) vRealize Operations for Horizon (V4H)

Jan 5, 2018
Unscored —

CVE-2017-4940

The ESXi Host Client in VMware ESXi (6.5 before ESXi650-201712103-SG, 5.5 before ESXi600-201711103-SG and 5.5 before ES…

VMware ESXi Virtualization

Dec 20, 2017
Unscored —

CVE-2017-4943

VMware vCenter Server Appliance (vCSA) (6.5 before 6.5 U1d) contains a local privilege escalation vulnerability via the…

VMware vCenter Server Appliance (vCSA) Virtualization

Dec 20, 2017
Unscored —

CVE-2017-4941

VMware ESXi (6.0 before ESXi600-201711101-SG, 5.5 ESXi550-201709101-SG), Workstation (12.x before 12.5.8), and Fusion (…

VMware Workstation Fusion ESXi Virtualization

Dec 20, 2017
Unscored —

CVE-2017-4933

VMware ESXi (6.5 before ESXi650-201710401-BG), Workstation (12.x before 12.5.8), and Fusion (8.x before 8.5.9) contain …

VMware Workstation Fusion ESXi Virtualization

Dec 20, 2017
Unscored —

CVE-2017-4942

VMware AirWatch Console (AWC) contains a Broken Access Control vulnerability. Successful exploitation of this issue cou…

VMware Airwatch Console

Dec 13, 2017

VMware

Products

VMware vCloud Director for Service Providers 9.5.x prior to 9.5.0.3 update resolves a Remote Session Hijack vulnerabili…

VMware ESXi 6.7 without ESXi670-201811401-BG and VMware ESXi 6.5 without ESXi650-201811301-BG, VMware ESXi 6.0 without …

VMware ESXi 6.7 without ESXi670-201811401-BG and VMware ESXi 6.5 without ESXi650-201811301-BG contain uninitialized sta…

VMware Workstation (15.x before 15.0.2 and 14.x before 14.1.5) and Fusion (11.x before 11.0.2 and 10.x before 10.1.5) c…

VMware vRealize Log Insight (4.7.x before 4.7.1 and 4.6.x before 4.6.2) contains a vulnerability due to improper author…

VMware ESXi (6.7 before ESXi670-201810101-SG, 6.5 before ESXi650-201808401-BG, and 6.0 before ESXi600-201808401-BG), Wo…

VMware ESXi (6.7, 6.5, 6.0), Workstation (15.x and 14.x) and Fusion (11.x and 10.x) contain a denial-of-service vulnera…

The VMware Workspace ONE Unified Endpoint Management Console (A/W Console) 9.7.x prior to 9.7.0.3, 9.6.x prior to 9.6.0…

The AirWatch Agent for iOS prior to 5.8.1 contains a data protection vulnerability whereby the files and keychain entri…

The VMware Content Locker for iOS prior to 4.14 contains a data protection vulnerability in the SQLite database. This v…

VMware Workstation (14.x before 14.1.3) and Fusion (10.x before 10.1.3) contain an out-of-bounds write vulnerability in…

VMware Horizon 6 (6.x.x before 6.2.7), Horizon 7 (7.x.x before 7.5.1), and Horizon Client (4.x.x and prior before 4.8.1…

VMware Horizon View Agents (7.x.x before 7.5.1) contain a local information disclosure vulnerability due to insecure lo…

VMware ESXi (6.7 before ESXi670-201806401-BG, 6.5 before ESXi650-201806401-BG, 6.0 before ESXi600-201806401-BG and 5.5 …

VMware Tools (10.x and prior before 10.3.0) contains an out-of-bounds read vulnerability in HGFS. Successful exploitati…

VMware ESXi (6.7 before ESXi670-201806401-BG), Workstation (14.x before 14.1.2), and Fusion (10.x before 10.1.2) contai…

VMware ESXi (6.7 before ESXi670-201806401-BG), Workstation (14.x before 14.1.2), and Fusion (10.x before 10.1.2) contai…

VMware ESXi (6.7 before ESXi670-201806401-BG), Workstation (14.x before 14.1.2), and Fusion (10.x before 10.1.2) contai…

VMware NSX SD-WAN Edge by VeloCloud prior to version 3.1.0 contains a command injection vulnerability in the local web …

The VMware AirWatch Agent for Android prior to 8.2 and AirWatch Agent for Windows Mobile prior to 6.5.2 contain a remot…

VMware Horizon Client for Linux (4.x before 4.8.0 and prior) contains a local privilege escalation vulnerability due to…

VMware Workstation (14.x before 14.1.2) and Fusion (10.x before 10.1.2) contain multiple denial-of-service vulnerabilit…

VMware Fusion (10.x before 10.1.2) contains a signature bypass vulnerability which may lead to a local privilege escala…

VMware Xenon 1.x, prior to 1.5.4-CR7_1, 1.5.7_7, 1.5.4-CR6_2, 1.3.7-CR1_2, 1.1.0-CR0-3, 1.1.0-CR3_1,1.4.2-CR4_1, and 1.…

VMware Horizon DaaS (7.x before 8.0.0) contains a broken authentication vulnerability that may allow an attacker to byp…

VMware vRealize Automation (vRA) prior to 7.3.1 contains a vulnerability that may allow for a DOM-based cross-site scri…

VMware vRealize Automation (vRA) prior to 7.4.0 contains a vulnerability in the handling of session IDs. Exploitation o…

VMware Workstation (14.x before 14.1.1, 12.x) and Fusion (10.x before 10.1.1 and 8.x) contain a denial-of-service vulne…

VMware vRealize Automation (7.3 and 7.2) and vSphere Integrated Containers (1.x before 1.3) contain a deserialization v…

VMware AirWatch Console (9.2.x before 9.2.2 and 9.1.x before 9.1.5) contains a Cross Site Request Forgery vulnerability…

VMware Workstation and Fusion contain a use-after-free vulnerability in VMware NAT service when IPv6 mode is enabled. T…

VMware Workstation and Fusion contain an integer overflow vulnerability in VMware NAT service when IPv6 mode is enabled…

VMware Workstation (14.x before 14.1.0 and 12.x) and Horizon View Client (4.x before 4.7.0) contain an out-of-bounds re…

VMware Workstation (14.x and 12.x) and Fusion (10.x and 8.x) contain a guest access control vulnerability. This issue m…

The VMware V4H and V4PA desktop agents (6.x before 6.5.1) contain a privilege escalation vulnerability. Successful expl…

The ESXi Host Client in VMware ESXi (6.5 before ESXi650-201712103-SG, 5.5 before ESXi600-201711103-SG and 5.5 before ES…

VMware vCenter Server Appliance (vCSA) (6.5 before 6.5 U1d) contains a local privilege escalation vulnerability via the…

VMware ESXi (6.0 before ESXi600-201711101-SG, 5.5 ESXi550-201709101-SG), Workstation (12.x before 12.5.8), and Fusion (…

VMware ESXi (6.5 before ESXi650-201710401-BG), Workstation (12.x before 12.5.8), and Fusion (8.x before 8.5.9) contain …

VMware AirWatch Console (AWC) contains a Broken Access Control vulnerability. Successful exploitation of this issue cou…