Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

vmware cloud foundation - vulnerabilities and exploits

(subscribe to this query)
NA
CVE-2022-31699
VMware ESXi contains a heap-overflow vulnerability. A malicious local actor with restricted privileges within a sandbox process may exploit this issue to achieve a partial information disclosure.
Vmware Esxi 6.5Vmware Esxi 6.7Vmware Esxi 7.0Vmware Cloud Foundation 4.0.1Vmware Cloud Foundation 3.0.1Vmware Cloud Foundation 3.0.1.1Vmware Cloud Foundation 3.5Vmware Cloud Foundation 3.5.1Vmware Cloud Foundation 3.7Vmware Cloud Foundation 3.7.1Vmware Cloud Foundation 3.7.2Vmware Cloud Foundation 3.8Vmware Cloud Foundation 3.8.1Vmware Cloud Foundation 3.9Vmware Cloud Foundation 3.9.1Vmware Cloud Foundation 3.10Vmware Cloud Foundation 4.1Vmware Cloud Foundation 4.2.1Vmware Cloud Foundation 4.1.0.1Vmware Cloud Foundation 3.0Vmware Cloud Foundation 4.0Vmware Cloud Foundation 3.11
NA
CVE-2022-31698
The vCenter Server contains a denial-of-service vulnerability in the content library service. A malicious actor with network access to port 443 on vCenter Server may exploit this issue to trigger a denial-of-service condition by sending a specially crafted header.
Vmware Vcenter Server 6.5Vmware Vcenter Server 6.7Vmware Vcenter Server 7.0Vmware Cloud Foundation 4.0Vmware Cloud Foundation 4.0.1Vmware Cloud Foundation 3.0Vmware Cloud Foundation 3.0.1Vmware Cloud Foundation 3.0.1.1Vmware Cloud Foundation 3.5Vmware Cloud Foundation 3.5.1Vmware Cloud Foundation 3.7Vmware Cloud Foundation 3.7.1Vmware Cloud Foundation 3.7.2Vmware Cloud Foundation 3.8Vmware Cloud Foundation 3.8.1Vmware Cloud Foundation 3.9Vmware Cloud Foundation 3.9.1Vmware Cloud Foundation 3.10Vmware Cloud Foundation 4.1Vmware Cloud Foundation 4.2.1Vmware Cloud Foundation 4.1.0.1Vmware Cloud Foundation 3.11
NA
CVE-2022-31696
VMware ESXi contains a memory corruption vulnerability that exists in the way it handles a network socket. A malicious actor with local access to ESXi may exploit this issue to corrupt memory leading to an escape of the ESXi sandbox.
Vmware Esxi 6.5Vmware Esxi 6.7Vmware Cloud FoundationVmware Esxi 7.0Vmware Cloud Foundation 4.4.1Vmware Cloud Foundation 4.4.1.1Vmware Cloud Foundation 4.4Vmware Cloud Foundation 4.5Vmware Cloud Foundation 4.76Vmware Cloud Foundation 3.11Vmware Cloud Foundation 3.10Vmware Cloud Foundation 4.3.11
670
VMScore
CVE-2022-22972
VMware Workspace ONE Access, Identity Manager and vRealize Automation contain an authentication bypass vulnerability affecting local domain users. A malicious actor with network access to the UI may be able to obtain administrative access without the need to authenticate.
Vmware Identity Manager 3.3.3Vmware Identity Manager 3.3.4Vmware Identity Manager 3.3.5Vmware Identity Manager 3.3.6Vmware Vrealize Automation 7.6Vmware Workspace One Access 20.10.0.0Vmware Workspace One Access 20.10.0.1Vmware Workspace One Access 21.08.0.0Vmware Workspace One Access 21.08.0.1Vmware Cloud Foundation 4.0Vmware Cloud Foundation 4.0.1Vmware Vrealize Suite Lifecycle Manager 8.0Vmware Vrealize Suite Lifecycle Manager 8.0.1Vmware Vrealize Suite Lifecycle Manager 8.1Vmware Vrealize Suite Lifecycle Manager 8.2Vmware Cloud Foundation 3.0Vmware Cloud Foundation 3.0.1Vmware Cloud Foundation 3.0.1.1Vmware Cloud Foundation 3.5Vmware Cloud Foundation 3.5.1Vmware Cloud Foundation 3.7Vmware Cloud Foundation 3.7.1
NA
CVE-2022-31681
VMware ESXi contains a null-pointer deference vulnerability. A malicious actor with privileges within the VMX process only, may create a denial of service condition on the host.
Vmware Esxi 7.0Vmware EsxiVmware Cloud FoundationVmware Cloud Foundation 4.4.1Vmware Cloud Foundation 4.4.1.1Vmware Cloud Foundation 4.4
544
VMScore
CVE-2021-21975
Server Side Request Forgery in vRealize Operations Manager API (CVE-2021-21975) before 8.4 may allow a malicious actor with network access to the vRealize Operations Manager API can perform a Server Side Request Forgery attack to steal administrative credentials.
Vmware Vrealize Operations Manager 7.0.0Vmware Vrealize Operations Manager 7.5.0Vmware Vrealize Operations Manager 8.0.0Vmware Vrealize Operations Manager 8.0.1Vmware Vrealize Operations Manager 8.1.0Vmware Vrealize Operations Manager 8.1.1Vmware Vrealize Operations Manager 8.2.0Vmware Vrealize Operations Manager 8.3.0Vmware Cloud Foundation 3.0Vmware Cloud Foundation 3.0.1Vmware Cloud Foundation 3.0.1.1Vmware Cloud Foundation 3.5Vmware Cloud Foundation 3.5.1Vmware Cloud Foundation 3.7Vmware Cloud Foundation 3.7.1Vmware Cloud Foundation 3.7.2Vmware Cloud Foundation 3.8Vmware Cloud Foundation 3.8.1Vmware Cloud Foundation 3.9Vmware Cloud Foundation 3.9.1Vmware Cloud Foundation 3.10Vmware Cloud Foundation 4.0
891
VMScore
CVE-2021-21983
Arbitrary file write vulnerability in vRealize Operations Manager API (CVE-2021-21983) before 8.4 may allow an authenticated malicious actor with network access to the vRealize Operations Manager API can write files to arbitrary locations on the underlying photon operating system...
Vmware Vrealize Operations Manager 7.0.0Vmware Vrealize Operations Manager 7.5.0Vmware Vrealize Operations Manager 8.0.0Vmware Vrealize Operations Manager 8.0.1Vmware Vrealize Operations Manager 8.1.0Vmware Vrealize Operations Manager 8.1.1Vmware Vrealize Operations Manager 8.2.0Vmware Vrealize Operations Manager 8.3.0Vmware Cloud Foundation 3.0Vmware Cloud Foundation 3.0.1Vmware Cloud Foundation 3.0.1.1Vmware Cloud Foundation 3.5Vmware Cloud Foundation 3.5.1Vmware Cloud Foundation 3.7Vmware Cloud Foundation 3.7.1Vmware Cloud Foundation 3.7.2Vmware Cloud Foundation 3.8Vmware Cloud Foundation 3.8.1Vmware Cloud Foundation 3.9Vmware Cloud Foundation 3.9.1Vmware Cloud Foundation 3.10Vmware Cloud Foundation 4.0
445
VMScore
CVE-2021-22003
VMware Workspace ONE Access and Identity Manager, unintentionally provide a login interface on port 7443. A malicious actor with network access to port 7443 may attempt user enumeration or brute force the login endpoint, which may or may not be practical based on lockout policy c...
Vmware Identity Manager 3.3.2Vmware Identity Manager 3.3.3Vmware Identity Manager 3.3.4Vmware Identity Manager 3.3.5Vmware Workspace One Access 20.01Vmware Workspace One Access 20.10Vmware Workspace One Access 20.10.01Vmware Cloud Foundation 4.0Vmware Cloud Foundation 4.0.1Vmware Cloud Foundation 4.1Vmware Cloud Foundation 4.1.0.1Vmware Cloud Foundation 4.2.1Vmware Vrealize Suite Lifecycle Manager 8.0Vmware Vrealize Suite Lifecycle Manager 8.0.1Vmware Vrealize Suite Lifecycle Manager 8.1Vmware Vrealize Suite Lifecycle Manager 8.2
668
VMScore
CVE-2021-22002
VMware Workspace ONE Access and Identity Manager, allow the /cfg web app and diagnostic endpoints, on port 8443, to be accessed via port 443 using a custom host header. A malicious actor with network access to port 443 could tamper with host headers to facilitate access to the /c...
Vmware Identity Manager 3.3.2Vmware Identity Manager 3.3.3Vmware Identity Manager 3.3.4Vmware Identity Manager 3.3.5Vmware Workspace One Access 20.01Vmware Workspace One Access 20.10Vmware Workspace One Access 20.10.01Vmware Cloud Foundation 4.0Vmware Cloud Foundation 4.0.1Vmware Cloud Foundation 4.1Vmware Cloud Foundation 4.1.0.1Vmware Cloud Foundation 4.2.1Vmware Vrealize Suite Lifecycle Manager 8.0Vmware Vrealize Suite Lifecycle Manager 8.0.1Vmware Vrealize Suite Lifecycle Manager 8.1Vmware Vrealize Suite Lifecycle Manager 8.2
NA
CVE-2023-34043
VMware Aria Operations contains a local privilege escalation vulnerability. A malicious actor with administrative access to the local system can escalate privileges to 'root'.
Vmware Cloud FoundationVmware Cloud Foundation 5.0Vmware Aria Operations 8.10.0Vmware Aria Operations 8.6.0Vmware Aria Operations 8.12.0
VMScore
CVSSv2
CVSSv3
VMScore
Recommendations:
blind SQL injectionCVE-2006-4304CVE-2023-26603CVE-2024-28327CVE-2023-50363CVE-2024-21905template injectionCVE-2024-3400cross-site request forgery
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook