Vulmon Recent Vulnerabilities Product List Research Posts Trends Blog About Contact

vmware cloud foundation vulnerabilities and exploits

(subscribe to this query)
430
VMScore

CVE-2022-31699

VMware ESXi contains a heap-overflow vulnerability. A malicious local actor with restricted privileges within a sandbox process may exploit this issue to achieve a partial information disclosure.
Vmware Cloud Foundation 3.0Vmware Cloud Foundation 3.0.1Vmware Cloud Foundation 3.0.1.1Vmware Cloud Foundation 3.5Vmware Cloud Foundation 3.5.1Vmware Cloud Foundation 3.7Vmware Cloud Foundation 3.7.1Vmware Cloud Foundation 3.7.2Vmware Cloud Foundation 3.8Vmware Cloud Foundation 3.8.1Vmware Cloud Foundation 3.9Vmware Cloud Foundation 3.9.1
630
VMScore

CVE-2022-31698

The vCenter Server contains a denial-of-service vulnerability in the content library service. A malicious actor with network access to port 443 on vCenter Server may exploit this issue to trigger a denial-of-service condition by sending a specially crafted header.
Vmware Cloud Foundation 3.0Vmware Cloud Foundation 3.0.1Vmware Cloud Foundation 3.0.1.1Vmware Cloud Foundation 3.5Vmware Cloud Foundation 3.5.1Vmware Cloud Foundation 3.7Vmware Cloud Foundation 3.7.1Vmware Cloud Foundation 3.7.2Vmware Cloud Foundation 3.8Vmware Cloud Foundation 3.8.1Vmware Cloud Foundation 3.9Vmware Cloud Foundation 3.9.1
980
VMScore

CVE-2022-31696

VMware ESXi contains a memory corruption vulnerability that exists in the way it handles a network socket. A malicious actor with local access to ESXi may exploit this issue to corrupt memory leading to an escape of the ESXi sandbox.
Vmware Cloud FoundationVmware Cloud Foundation 3.10Vmware Cloud Foundation 3.11Vmware Cloud Foundation 4.3.11Vmware Cloud Foundation 4.4Vmware Cloud Foundation 4.4.1Vmware Cloud Foundation 4.4.1.1Vmware Cloud Foundation 4.5Vmware Esxi 6.5Vmware Esxi 6.7Vmware Esxi 7.0
750
VMScore

CVE-2022-31681

VMware ESXi contains a null-pointer deference vulnerability. A malicious actor with privileges within the VMX process only, may create a denial of service condition on the host.
Vmware Cloud FoundationVmware Cloud Foundation 4.4Vmware Cloud Foundation 4.4.1Vmware Cloud Foundation 4.4.1.1Vmware EsxiVmware Esxi 7.0
1000
VMScore

CVE-2022-22972

VMware Workspace ONE Access, Identity Manager and vRealize Automation contain an authentication bypass vulnerability affecting local domain users. A malicious actor with network access to the UI may be able to obtain administrative access without the need to authenticate.
Vmware Identity Manager 3.3.3Vmware Identity Manager 3.3.4Vmware Identity Manager 3.3.5Vmware Identity Manager 3.3.6Vmware Vrealize Automation 7.6Vmware Workspace One Access 20.10.0.0Vmware Workspace One Access 20.10.0.1Vmware Workspace One Access 21.08.0.0Vmware Workspace One Access 21.08.0.1Vmware Cloud Foundation 3.0Vmware Cloud Foundation 3.0.1Vmware Cloud Foundation 3.0.1.1
850
VMScore

CVE-2021-21975

Server Side Request Forgery in vRealize Operations Manager API (CVE-2021-21975) before 8.4 may allow a malicious actor with network access to the vRealize Operations Manager API can perform a Server Side Request Forgery attack to steal administrative credentials.
Vmware Cloud Foundation 3.0Vmware Cloud Foundation 3.0.1Vmware Cloud Foundation 3.0.1.1Vmware Cloud Foundation 3.5Vmware Cloud Foundation 3.5.1Vmware Cloud Foundation 3.7Vmware Cloud Foundation 3.7.1Vmware Cloud Foundation 3.7.2Vmware Cloud Foundation 3.8Vmware Cloud Foundation 3.8.1Vmware Cloud Foundation 3.9Vmware Cloud Foundation 3.9.1
750
VMScore

CVE-2021-21983

Arbitrary file write vulnerability in vRealize Operations Manager API (CVE-2021-21983) before 8.4 may allow an authenticated malicious actor with network access to the vRealize Operations Manager API can write files to arbitrary locations on the underlying photon operating system...
Vmware Cloud Foundation 3.0Vmware Cloud Foundation 3.0.1Vmware Cloud Foundation 3.0.1.1Vmware Cloud Foundation 3.5Vmware Cloud Foundation 3.5.1Vmware Cloud Foundation 3.7Vmware Cloud Foundation 3.7.1Vmware Cloud Foundation 3.7.2Vmware Cloud Foundation 3.8Vmware Cloud Foundation 3.8.1Vmware Cloud Foundation 3.9Vmware Cloud Foundation 3.9.1
770
VMScore

CVE-2023-34043

VMware Aria Operations contains a local privilege escalation vulnerability. A malicious actor with administrative access to the local system can escalate privileges to 'root'.
Vmware Aria Operations 8.6.0Vmware Aria Operations 8.10.0Vmware Aria Operations 8.12.0Vmware Cloud FoundationVmware Cloud Foundation 5.0
750
VMScore

CVE-2022-22948

The vCenter Server contains an information disclosure vulnerability due to improper permission of files. A malicious actor with non-administrative access to the vCenter Server may exploit this issue to gain access to sensitive information.
Vmware Cloud FoundationVmware Cloud Foundation 3.11Vmware Vcenter Server 6.5Vmware Vcenter Server 6.7Vmware Vcenter Server 7.0
1000
VMScore

CVE-2021-22002

VMware Workspace ONE Access and Identity Manager, allow the /cfg web app and diagnostic endpoints, on port 8443, to be accessed via port 443 using a custom host header. A malicious actor with network access to port 443 could tamper with host headers to facilitate access to the /c...
Vmware Identity Manager 3.3.2Vmware Identity Manager 3.3.3Vmware Identity Manager 3.3.4Vmware Identity Manager 3.3.5Vmware Workspace One Access 20.01Vmware Workspace One Access 20.10Vmware Workspace One Access 20.10.01Vmware Cloud Foundation 4.0Vmware Cloud Foundation 4.0.1Vmware Cloud Foundation 4.1Vmware Cloud Foundation 4.1.0.1Vmware Cloud Foundation 4.2.1
Preferred Score:
VMScore
CVSSv2
CVSSv3
CVSSv4
EPSS
VMScore
Recommendations:
privilegeCVE-2025-43967XSSadeptlanguageCVE-2024-42699CVE-2025-1732pritunlpritunl-clientCVE-2025-31201men salon management systemlocalCVE-2025-24071CVE-2025-43973
Home
/
Search Results
Vulmon Logo Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook