VMware

Cloud Foundation

138 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
5.4

CVE-2026-41724

Medienbericht
  • EPSS 0.31%
  • Veröffentlicht 08.06.2026 07:07:04
  • Zuletzt bearbeitet 15.06.2026 18:50:11

VMware Cloud Foundation Operations contains multiple stored cross-site scripting vulnerabilities.A malicious actor with privileges to create policies, views or text-widgets may be able to inject scripts to perform administrative actions in VMware Clo...

8

CVE-2026-41723

Medienbericht
  • EPSS 0.4%
  • Veröffentlicht 08.06.2026 07:06:11
  • Zuletzt bearbeitet 16.06.2026 13:38:23

VMware Cloud Foundation Operations contains multiple stored cross-site scripting vulnerabilities.A malicious actor with privileges to create policies, views or text-widgets may be able to inject scripts to perform administrative actions in VMware Clo...

5.4

CVE-2026-41722

Medienbericht
  • EPSS 0.3%
  • Veröffentlicht 08.06.2026 07:05:31
  • Zuletzt bearbeitet 16.06.2026 13:40:57

VMware Cloud Foundation Operations contains multiple stored cross-site scripting vulnerabilities.A malicious actor with privileges to create policies, views or text-widgets may be able to inject scripts to perform administrative actions in VMware Clo...

7.2

CVE-2026-22721

  • EPSS 0.69%
  • Veröffentlicht 25.02.2026 20:00:15
  • Zuletzt bearbeitet 04.03.2026 15:54:26

VMware Aria Operations contains a privilege escalation vulnerability. A malicious actor with privileges in vCenter to access Aria Operations may leverage this vulnerability to obtain administrative access in VMware Aria Operations. To remediate CVE-2...

9

CVE-2026-22720

  • EPSS 0.41%
  • Veröffentlicht 25.02.2026 19:33:14
  • Zuletzt bearbeitet 04.03.2026 15:55:32

VMware Aria Operations contains a stored cross-site scripting vulnerability. A malicious actor with privileges to create custom benchmarks may be able to inject script to perform administrative actions in VMware Aria Operations.  To remediate CVE-20...

8.1

CVE-2026-22719

Warnung Medienbericht
  • EPSS 17.42%
  • Veröffentlicht 25.02.2026 19:18:59
  • Zuletzt bearbeitet 04.03.2026 15:08:13

VMware Aria Operations contains a command injection vulnerability. A malicious unauthenticated actor may exploit this issue to execute arbitrary commands which may lead to remote code execution in VMware Aria Operations while support-assisted product...

7.8

CVE-2025-41244

Warnung Medienbericht Exploit
  • EPSS 7.88%
  • Veröffentlicht 29.09.2025 17:15:30
  • Zuletzt bearbeitet 06.11.2025 13:58:13

VMware Aria Operations and VMware Tools contain a local privilege escalation vulnerability. A malicious local actor with non-administrative privileges having access to a VM with VMware Tools installed and managed by Aria Operations with SDMP enabled ...

5.9

CVE-2025-22245

Medienbericht
  • EPSS 0.22%
  • Veröffentlicht 04.06.2025 19:32:42
  • Zuletzt bearbeitet 14.07.2025 17:22:07

VMware NSX contains a stored Cross-Site Scripting (XSS) vulnerability in the router port due to improper input validation.

6.9

CVE-2025-22244

Medienbericht
  • EPSS 0.26%
  • Veröffentlicht 04.06.2025 19:32:17
  • Zuletzt bearbeitet 14.07.2025 17:22:22

VMware NSX contains a stored Cross-Site Scripting (XSS) vulnerability in the gateway firewall due to improper input validation.

7.5

CVE-2025-22243

Medienbericht
  • EPSS 0.31%
  • Veröffentlicht 04.06.2025 19:31:36
  • Zuletzt bearbeitet 14.07.2025 17:22:34

VMware NSX Manager UI is vulnerable to a stored Cross-Site Scripting (XSS) attack due to improper input validation.