VMware Vulnerabilities
144 vulnerabilities related to VMware
- 2026-08-07VMware ESXi /sdk 默认口令漏洞
- PoC2026-02-04CVE-2022-31678: VMWare Cloud Foundation NSX-V - XML External Entity (XXE)
- PoC2026-01-08CVE-2018-6961: VMware NSX SD-WAN Edge - Command Injection
- 2025-10-01(CVE-2025-41252) VMware NSX未认证的用户名枚举漏洞
- 2025-09-30(CVE-2025-41246) VMware Tools for Windows授权不当漏洞
- 2025-09-30（CVE-2025-41250）VMware vCenter SMTP头部注入漏洞
- 2025-09-17Vmware Spring Security 逻辑缺陷漏洞
- 2025-09-17Vmware Spring Framework 逻辑缺陷漏洞
- 2025-09-01CVE-2023-20888: VMware Aria Operations for Networks - Remote Code Execution
- PoC2025-08-01CVE-2021-21972: VMware vSphere Client (HTML5) - Remote Code Execution
- PoC2025-08-01CVE-2021-21973: VMware vSphere - Server-Side Request Forgery
- PoC2025-08-01CVE-2021-21978: VMware View Planner <4.6 SP1- Remote Code Execution
- PoC2025-08-01CVE-2021-21985: VMware vSphere Client (HTML5) - Remote Code Execution
- PoC2025-08-01CVE-2021-22005: VMware vCenter Server - Arbitrary File Upload
- PoC2025-08-01CVE-2021-22054: VMWare Workspace ONE UEM - Server-Side Request Forgery
- PoC2025-08-01CVE-2022-22954: VMware Workspace ONE Access - Server-Side Template Injection
- PoC2025-08-01CVE-2022-22972: VMware Workspace ONE Access/Identity Manager/vRealize Automation - Authentication Bypass
- PoC2025-08-01CVE-2022-31656: VMware - Local File Inclusion
- PoC2025-08-01CVE-2023-20864: VMware Aria Operations for Logs - Unauthenticated Remote Code Execution
- PoC2025-08-01CVE-2023-20887: VMware VRealize Network Insight - Remote Code Execution
- PoC2025-08-01CVE-2023-20888: VMware Aria Operations for Networks - Remote Code Execution
- PoC2025-08-01CVE-2023-20889: VMware Aria Operations for Networks - Code Injection Information Disclosure Vulnerability
- PoC2025-08-01CVE-2023-34039: VMWare Aria Operations - Remote Code Execution
- PoC2025-08-01CVE-2019-5544: VMware ESXi SLP - Heap Overflow DoS
- PoC2025-08-01CVE-2021-21972: VMware vSphere Client (HTML5) - Remote Code Execution
- PoC2025-08-01CVE-2021-21985: VMware vSphere Client (HTML5) - Remote Code Execution
- PoC2025-08-01CVE-2021-22005: VMware vCenter Server - Arbitrary File Upload
- PoC2025-08-01CVE-2022-22954: VMware Workspace ONE Access SSTI
- PoC2025-08-01CVE-2023-20887: VMware VRealize Network Insight - Remote Code Execution
- PoC2025-08-01vmware-vcenter-lfi: VMware vCenter - Local File Inclusion
- PoC2025-08-01vmware-vcenter-log4j-jndi-rce-temp: VMware VCenter - Remote Code Execution (Apache Log4j)
- PoC2025-08-01vmware-vcenter-log4j-jndi-rce: VMware VCenter - Remote Code Execution (Apache Log4j)
- PoC2025-08-01vmware-vcenter-provider-logo-ssrf: Vmware VCenter - Arbitrary File Read
- PoC2025-08-01CVE-2022-22956: VMware Workspace ONE Access - Authentication Bypass
- PoC2025-08-01CVE-2022-31704: VMware vRealize Log Insight - Improper Access Control to RCE
- PoC2025-08-01CVE-2022-31706: VMware vRealize Log Insight - Path Traversal
- PoC2025-08-01CVE-2022-31711: VMware vRealize Log Insight < v8.10.2 - Information Disclosure
- PoC2025-08-01vmware-siterecovery-log4j-rce: VMware Site Recovery Manager - Remote Code Execution (Apache Log4j)
- PoC2025-08-01vmware-cloud-xss: VMWare Cloud - Cross Site Scripting
- PoC2025-08-01vmware-hcx-log4j-rce: VMware HCX - Remote Code Execution (Apache Log4j)
- PoC2025-08-01vmware-horizon-log4j-rce: VMware Horizon - JNDI Remote Code Execution (Apache Log4j)
- PoC2025-08-01vmware-nsx-log4j-rce: VMware NSX - Remote Code Execution (Apache Log4j)
- PoC2025-08-01vmware-nsx-stream-rce: VMware NSX Manager XStream Pre-authenticated Remote Code Execution
- PoC2025-08-01vmware-operation-manager-log4j-rce: VMware Operations Manager - Remote Code Execution (Apache Log4j)
- PoC2025-08-01vmware-vcenter-lfi-linux: Linux Vmware Vcenter - Local File Inclusion
- PoC2025-08-01vmware-vcenter-lfi: VMware vCenter - Local File Inclusion
- PoC2025-08-01vmware-vcenter-log4j-rce: VMware VCenter - Remote Code Execution (Apache Log4j)
- PoC2025-08-01vmware-vcenter-ssrf: VMware vCenter - Server-Side Request Forgery/Local File Inclusion/Cross-Site Scripting
- PoC2025-08-01vrealize-operations-log4j-rce: VMware vRealize Operations Tenant - JNDI Remote Code Execution (Apache Log4j)
- PoC2025-08-01CVE-2020-3952: VMware vCenter Server LDAP Broken Access Control
- PoC2025-08-01CVE-2023-34048: VMware vCenter Server - Out-of-Bounds Write
- PoC2025-08-01vmware-detect: Vmware Vcenter - Build Version
- 2025-07-17VMware ESXi、Workstation、Fusion VMXNET3 整数溢出漏洞
- 2025-07-17VMware ESXi、Workstation、Fusion VMCI 整数下溢漏洞
- 2025-07-17VMware ESXi、Workstation、Fusion PVSCSI 堆溢出漏洞
- 2025-07-17VMware ESXi、Workstation、Fusion vSockets 信息泄露漏洞
- 2025-03-04VMware ESXi/Workstation/Fusion HGFS组件越界读取漏洞
- 2025-03-04VMware ESXi 越界写入漏洞
- 2025-03-04VMware ESXi/Workstation VMCI堆溢出漏洞
- 2025-02-28VMware vCenter Server /ui/vcav-bootstrap/rest/vcav-providers/provider-logo 文件读取漏洞（CVE-2021-21986）
- 2025-02-28VMware vCenter Server /ui/vcav-bootstrap/rest/vcav-providers/provider-logo 文件读取漏洞（CVE-2021-21986）
- 2024-11-20VMware Spring Framework 安全缺陷漏洞 可致拒绝服务
- 2024-10-31Vmware Spring Security 访问控制不当漏洞
- 2024-10-17VMware Hybrid Cloud Extension 需授权 SQL注入漏洞
- 2024-09-18VMware VCenter Server 缓冲区溢出漏洞
- 2024-08-19Vmware SpringFramework SPEL表达式 拒绝服务漏洞
- 2024-08-19Vmware SpringFramework 拒绝服务漏洞
- 2024-08-14VMware Aria Operations LoginBanner 存储型跨站脚本漏洞
- 2024-06-24VMware vCenter Server rhttpproxy 认证绕过漏洞（CVE-2021-22017）
- 2024-06-21VMware vCenter Server CVE-2021-21985 远程代码执行漏洞
- 2024-06-19VMware VCenter Server 缓冲区溢出
- 2024-06-04VMware Authentication Daemon 弱口令漏洞
- 2024-06-04VMware ESXi 服务存在弱口令漏洞(/folder接口)
- 2024-04-25VMware Workspace ONE Access 身份认证绕过漏洞(CVE-2022-22972)
- 2024-04-11VMware vRealize Operations Manager服务器端请求伪造漏洞
- 2024-04-11VMware vCenter Server DCERPC 身份验证指针偏移越界漏洞
- 2024-04-03VMware vRealize Operations Manager服务器端请求伪造漏洞
- 2024-03-21VMware Aria Operations for Networks exportPDF 代码注入漏洞
- 2024-02-26VMware Horizon 存在 Log4j 远程命令执行漏洞
- 2024-02-22VMware Workspace ONE Access CVE-2022-22957 代码执行漏洞
- 2024-02-22VMware Workspace ONE Access CVE-2022-22956 认证绕过漏洞
- 2024-02-22VMware Workspace ONE Access CVE-2022-22955 认证绕过漏洞
- 2024-02-22VMware Workspace ONE Access身份验证绕过漏洞
- 2024-02-22VMware Products CVE-2022-22972认证绕过漏洞
- 2024-02-22VMware Workspace ONE Access CVE-2022-22960 权限提升漏洞
- 2024-02-22VMware Workspace ONE Access CVE-2022-22954远程代码执行漏洞
- 2024-02-21VMware Spring Security 权限绕过漏洞
- 2024-02-18VMware vCenter Server 存在 Log4j 远程命令执行漏洞
- 2024-02-07VMware Aria Operations for Networks saveFileToDisk 目录遍历漏洞
- 2024-02-07VMware vRealize Log Insight CVE-2022-31706 目录遍历漏洞
- 2024-02-07VMware Aria Operations for Logs内部集群控制器不安全的反序列化漏洞
- 2024-02-07VMware vCenter Server DCERPC Authentication Pointer 指针偏移越界漏洞
- 2024-02-07VMware Aria Operations Networks CVE-2023-20887远程命令执行漏洞
- 2024-02-07VMware vCenter Server Directory Service 认证绕过漏洞
- 2024-02-03VMware vCenter Server CVE-2021-21985 远程代码执行漏洞
- 2024-02-03VMware vCenter Server CVE-2021-21985 远程代码执行漏洞
- 2023-10-27VMware vCenter Server 存在远程命令执行漏洞
- 2023-06-28VMware vCenter Server 存在远程命令执行漏洞
- 2023-06-21VMware VRealize Network Insight saasresttosaasservlet 远程命令执行漏洞（CVE-2022-31702）
- 2023-06-21VMware VRealize Network Insight resttosaasservlet 远程命令执行漏洞（CVE-2023-20887）
- 2023-06-21VMware VRealize Network Insight saasresttosaasservlet 远程命令执行漏洞（CVE-2022-31702）
- 2023-06-21VMware VRealize Network Insight resttosaasservlet 远程命令执行漏洞（CVE-2023-20887）
- 2023-06-15VMware ESXi vmware-tools 存在远程命令执行漏洞
- 2023-04-18vmware workspace存在ssrf漏洞(CVE-2021-22054)
- 2022-04-12VMware Workspace ONE Access命令执行(CVE-2022-22954)
- 2021-12-18VMWare Workspace One UEM BlobHandler.ashx Url SSRF漏洞
- 2021-12-15VMware Horizon 基于Log4j组件的远程命令执行漏洞
- 2021-12-14Vmware vSphere 基于log4J组件的远程命令执行漏洞
- 2021-12-13vmware NSX /login 基于Log4j组件的远程命令执行漏洞
- 2021-12-07VMware vCenter (7.0.2.00100) provider-logo SSRF
- 2021-09-23VMware vCenter Server 文件上传漏洞(CVE-2021-22005)
- 2021-09-23VMware vCenter Server 存在特权提升漏洞
- 2021-09-23VMware vCenter Server 存在未授权访问漏洞
- 2021-09-23VMware vCenter Server API 接口存在未授权访问
- 2021-09-23VMware vCenter Server Analytics 存在任意文件上传漏洞
- 2021-09-23VMware vCenter Server 存在拒绝服务漏洞
- 2021-09-23VMware vCenter Server 存在敏感信息泄露
- 2021-09-23VMware vCenter Server 存在文件删除漏洞
- 2021-09-23VMware vCenter Server 存在特权提升漏洞
- 2021-09-23VMware vCenter Server 存在拒绝服务漏洞
- 2021-09-23VMware vCenter Server 存在远程代码执行漏洞
- 2021-09-23VMware vCenter Server 存在拒绝服务漏洞
- 2021-09-23VMware vCenter Server 存在拒绝服务漏洞
- 2021-09-23VMware vCenter Server 存在拒绝服务漏洞
- 2021-09-23VMware vCenter Server 存在跨站脚本漏洞
- 2021-09-23VMware vCenter Server json-rpc 敏感信息泄露
- 2021-09-23VMware vCenter Server 存在 SSRF 漏洞
- 2021-09-21VMware vCenter Server任意文件上传漏洞
- 2021-06-02VMware vCenter Server /setTargetObject远程代码执行漏洞(CVE-2021-21985)
- 2021-05-26VMware vCenter Server 存在远程命令执行漏洞
- 2021-05-26VMware vCenter Server /provider-logo 路径存在SSRF漏洞
- 2021-05-07VMware vRealize Business for Cloud 远程代码执行漏洞
- 2021-04-01VMware vRealize Operations Manager API SSRF漏洞(CVE-2021-21975)
- 2021-04-01VMware vRealize Operations /casa/nodes/thumbprints SSRF漏洞
- 2021-03-15VMware View Planner 远程代码执行漏洞（CVE-2021-21978）
- 2021-03-04VMware View Planner logupload logMetaData 远程代码执行漏洞
- 2021-02-25VMware vCenter Server 存在 SSRF 漏洞
- 2021-02-25VMware vCenter Server vROPS 存在远程命令执行
- 2021-02-24VMware vCenter Server /uploadova 远程代码执行漏洞(CVE-2021-21972)
- 2021-02-24VMware多个高危漏洞通告
- 2021-01-19Vmware Vcenter任意文件读取漏洞
- 2020-04-10VMware vCenter Server 存在任意文件读取漏洞
- 2018-01-06VMware vSphere Data Protection 存在任意文件上传漏洞
- 2013-05-01VMware vCenter Server Appliance 任意文件上传漏洞