Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

vmware cloud foundation 4.1.0.1 vulnerabilities and exploits

(subscribe to this query)
3.3
CVSSv3
CVE-2022-31699
VMware ESXi contains a heap-overflow vulnerability. A malicious local actor with restricted privileges within a sandbox process may exploit this issue to achieve a partial information disclosure.
Vmware Esxi 6.5Vmware Esxi 6.7Vmware Esxi 7.0Vmware Cloud Foundation 4.0.1Vmware Cloud Foundation 3.0.1Vmware Cloud Foundation 3.0.1.1Vmware Cloud Foundation 3.5Vmware Cloud Foundation 3.5.1Vmware Cloud Foundation 3.7Vmware Cloud Foundation 3.7.1Vmware Cloud Foundation 3.7.2Vmware Cloud Foundation 3.8Vmware Cloud Foundation 3.8.1Vmware Cloud Foundation 3.9Vmware Cloud Foundation 3.9.1Vmware Cloud Foundation 3.10Vmware Cloud Foundation 4.1Vmware Cloud Foundation 4.2.1Vmware Cloud Foundation 4.1.0.1Vmware Cloud Foundation 3.0Vmware Cloud Foundation 4.0Vmware Cloud Foundation 3.11
5.3
CVSSv3
CVE-2022-31698
The vCenter Server contains a denial-of-service vulnerability in the content library service. A malicious actor with network access to port 443 on vCenter Server may exploit this issue to trigger a denial-of-service condition by sending a specially crafted header.
Vmware Vcenter Server 6.5Vmware Vcenter Server 6.7Vmware Vcenter Server 7.0Vmware Cloud Foundation 4.0Vmware Cloud Foundation 4.0.1Vmware Cloud Foundation 3.0Vmware Cloud Foundation 3.0.1Vmware Cloud Foundation 3.0.1.1Vmware Cloud Foundation 3.5Vmware Cloud Foundation 3.5.1Vmware Cloud Foundation 3.7Vmware Cloud Foundation 3.7.1Vmware Cloud Foundation 3.7.2Vmware Cloud Foundation 3.8Vmware Cloud Foundation 3.8.1Vmware Cloud Foundation 3.9Vmware Cloud Foundation 3.9.1Vmware Cloud Foundation 3.10Vmware Cloud Foundation 4.1Vmware Cloud Foundation 4.2.1Vmware Cloud Foundation 4.1.0.1Vmware Cloud Foundation 3.11
7.5
CVSSv3
CVE-2021-22003
VMware Workspace ONE Access and Identity Manager, unintentionally provide a login interface on port 7443. A malicious actor with network access to port 7443 may attempt user enumeration or brute force the login endpoint, which may or may not be practical based on lockout policy c...
Vmware Identity Manager 3.3.2Vmware Identity Manager 3.3.3Vmware Identity Manager 3.3.4Vmware Identity Manager 3.3.5Vmware Workspace One Access 20.01Vmware Workspace One Access 20.10Vmware Workspace One Access 20.10.01Vmware Cloud Foundation 4.0Vmware Cloud Foundation 4.0.1Vmware Cloud Foundation 4.1Vmware Cloud Foundation 4.1.0.1Vmware Cloud Foundation 4.2.1Vmware Vrealize Suite Lifecycle Manager 8.0Vmware Vrealize Suite Lifecycle Manager 8.0.1Vmware Vrealize Suite Lifecycle Manager 8.1Vmware Vrealize Suite Lifecycle Manager 8.2
9.8
CVSSv3
CVE-2021-22002
VMware Workspace ONE Access and Identity Manager, allow the /cfg web app and diagnostic endpoints, on port 8443, to be accessed via port 443 using a custom host header. A malicious actor with network access to port 443 could tamper with host headers to facilitate access to the /c...
Vmware Identity Manager 3.3.2Vmware Identity Manager 3.3.3Vmware Identity Manager 3.3.4Vmware Identity Manager 3.3.5Vmware Workspace One Access 20.01Vmware Workspace One Access 20.10Vmware Workspace One Access 20.10.01Vmware Cloud Foundation 4.0Vmware Cloud Foundation 4.0.1Vmware Cloud Foundation 4.1Vmware Cloud Foundation 4.1.0.1Vmware Cloud Foundation 4.2.1Vmware Vrealize Suite Lifecycle Manager 8.0Vmware Vrealize Suite Lifecycle Manager 8.0.1Vmware Vrealize Suite Lifecycle Manager 8.1Vmware Vrealize Suite Lifecycle Manager 8.2
9.8
CVSSv3
CVE-2022-22972
VMware Workspace ONE Access, Identity Manager and vRealize Automation contain an authentication bypass vulnerability affecting local domain users. A malicious actor with network access to the UI may be able to obtain administrative access without the need to authenticate.
Vmware Identity Manager 3.3.3Vmware Identity Manager 3.3.4Vmware Identity Manager 3.3.5Vmware Identity Manager 3.3.6Vmware Vrealize Automation 7.6Vmware Workspace One Access 20.10.0.0Vmware Workspace One Access 20.10.0.1Vmware Workspace One Access 21.08.0.0Vmware Workspace One Access 21.08.0.1Vmware Cloud Foundation 4.0Vmware Cloud Foundation 4.0.1Vmware Vrealize Suite Lifecycle Manager 8.0Vmware Vrealize Suite Lifecycle Manager 8.0.1Vmware Vrealize Suite Lifecycle Manager 8.1Vmware Vrealize Suite Lifecycle Manager 8.2Vmware Cloud Foundation 3.0Vmware Cloud Foundation 3.0.1Vmware Cloud Foundation 3.0.1.1Vmware Cloud Foundation 3.5Vmware Cloud Foundation 3.5.1Vmware Cloud Foundation 3.7Vmware Cloud Foundation 3.7.1
7.8
CVSSv3
CVE-2022-22973
VMware Workspace ONE Access and Identity Manager contain a privilege escalation vulnerability. A malicious actor with local access can escalate privileges to 'root'.
Vmware Identity Manager 3.3.3Vmware Identity Manager 3.3.4Vmware Identity Manager 3.3.5Vmware Identity Manager 3.3.6Vmware Workspace One Access 20.10.0.0Vmware Workspace One Access 20.10.0.1Vmware Workspace One Access 21.08.0.0Vmware Workspace One Access 21.08.0.1Vmware Cloud Foundation 4.0Vmware Cloud Foundation 4.0.1Vmware Vrealize Suite Lifecycle Manager 8.0Vmware Vrealize Suite Lifecycle Manager 8.0.1Vmware Vrealize Suite Lifecycle Manager 8.1Vmware Vrealize Suite Lifecycle Manager 8.2Vmware Cloud Foundation 4.1Vmware Cloud Foundation 4.2.1Vmware Cloud Foundation 4.1.0.1Vmware Cloud Foundation 4.3.1Vmware Cloud Foundation 4.3Vmware Cloud Foundation 4.2Vmware Vrealize Suite Lifecycle Manager 8.8Vmware Vrealize Suite Lifecycle Manager 8.7
9.8
CVSSv3
CVE-2022-22965
A Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution (RCE) via data binding. The specific exploit requires the application to run on Tomcat as a WAR deployment. If the application is deployed as a Spring Boot executable jar, i.e....
Vmware Spring FrameworkCisco Cx Cloud AgentOracle Sd-wan Edge 9.0Oracle Retail Xstore Point Of Service 20.0.1Oracle Communications Cloud Native Core Security Edge Protection Proxy 1.7.0Oracle Financial Services Analytical Applications Infrastructure 8.1.1Oracle Sd-wan Edge 9.1Siemens Siveillance Identity 1.6Siemens Siveillance Identity 1.5Siemens Sipass Integrated 2.85Siemens Sipass Integrated 2.80Oracle Product Lifecycle Analytics 3.6.1Oracle Financial Services Enterprise Case Management 8.1.1.0Oracle Financial Services Enterprise Case Management 8.1.1.1Oracle Financial Services Behavior Detection Platform 8.1.2.0Oracle Financial Services Behavior Detection Platform 8.1.1.1Oracle Financial Services Behavior Detection Platform 8.1.1.0Oracle Communications Cloud Native Core Console 1.9.0Oracle Communications Cloud Native Core Policy 1.15.0Oracle Communications Cloud Native Core Unified Data Repository 1.15.0Oracle Communications Cloud Native Core Unified Data Repository 22.1.0Oracle Communications Cloud Native Core Security Edge Protection Proxy 22.1.0
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-27322CVE-2006-4304wirelessCVE-2023-23022local file inclusionCVE-2024-27058CVE-2024-33820open redirectCVE-2024-27079
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook