Skip to main content
EVULNABLE
Home

VMware

CVEs currently on EVULNABLE's Priority Feed for VMware, and this vendor's own CISA KEV history.

In EVULNABLE's ranked feed

Showing all 26 VMware CVEs in EVULNABLE's ranked feed.

#1 94 Immediate CVE-2021-21985 ExigentKEV since 2021 · listed over a yearRansomwareCISA KEV VMware — VMware vCenter Server Improper Input Validation Vulnerability KEV + ransomware, EPSS 99.9%

EVRS 94/100 · EVRS priority: Immediate · Exigent, a flag within Immediate. CVSS severity and EPSS are separate measurements, shown below.

CVSS9.8 (NVD)EPSS99.9% · 99.99th pctlKEV since2021-11-03

Why it matters: Listed in the CISA KEV catalog, and associated with known ransomware campaigns.

Full CVE pageNVD ↗CISA KEV ↗
#2 94 Immediate CVE-2021-22005 ExigentKEV since 2021 · listed over a yearRansomwareCISA KEV VMware — VMware vCenter Server File Upload Vulnerability KEV + ransomware, EPSS 99.9%

EVRS 94/100 · EVRS priority: Immediate · Exigent, a flag within Immediate. CVSS severity and EPSS are separate measurements, shown below.

CVSS9.8 (NVD)EPSS99.9% · 99.99th pctlKEV since2021-11-03

Why it matters: Listed in the CISA KEV catalog, and associated with known ransomware campaigns.

Full CVE pageNVD ↗CISA KEV ↗
#3 94 Immediate CVE-2022-22954 ExigentKEV since 2022 · listed over a yearRansomwareCISA KEV VMware — VMware Workspace ONE Access and Identity Manager Server-Side Template Injection Vulnerability KEV + ransomware, EPSS 99.9%

EVRS 94/100 · EVRS priority: Immediate · Exigent, a flag within Immediate. CVSS severity and EPSS are separate measurements, shown below.

CVSS9.8 (NVD)EPSS99.9% · 99.99th pctlKEV since2022-04-14

Why it matters: Listed in the CISA KEV catalog, and associated with known ransomware campaigns.

Full CVE pageNVD ↗CISA KEV ↗
#4 94 Immediate CVE-2021-21972 ExigentKEV since 2021 · listed over a yearRansomwareCISA KEV VMware — VMware vCenter Server Remote Code Execution Vulnerability KEV + ransomware, EPSS 99.9%

EVRS 94/100 · EVRS priority: Immediate · Exigent, a flag within Immediate. CVSS severity and EPSS are separate measurements, shown below.

CVSS9.8 (NVD)EPSS99.9% · 99.96th pctlKEV since2021-11-03

Why it matters: Listed in the CISA KEV catalog, and associated with known ransomware campaigns.

Full CVE pageNVD ↗CISA KEV ↗
#5 93 Immediate CVE-2019-5544 ExigentKEV since 2021 · listed over a yearRansomwareCISA KEV VMware — VMware ESXi and Horizon DaaS OpenSLP Heap-Based Buffer Overflow Vulnerability KEV + ransomware, EPSS 97.3%

EVRS 93/100 · EVRS priority: Immediate · Exigent, a flag within Immediate. CVSS severity and EPSS are separate measurements, shown below.

CVSS9.8 (NVD)EPSS97.3% · 99.9th pctlKEV since2021-11-03

Why it matters: Listed in the CISA KEV catalog, and associated with known ransomware campaigns.

Full CVE pageNVD ↗CISA KEV ↗
#6 89 Immediate CVE-2020-3992 ExigentKEV since 2021 · listed over a yearRansomwareCISA KEV VMware — VMware ESXi OpenSLP Use-After-Free Vulnerability KEV + ransomware, EPSS 83.0%

EVRS 89/100 · EVRS priority: Immediate · Exigent, a flag within Immediate. CVSS severity and EPSS are separate measurements, shown below.

CVSS9.8 (NVD)EPSS83.0% · 99.67th pctlKEV since2021-11-03

Why it matters: Listed in the CISA KEV catalog, and associated with known ransomware campaigns.

Full CVE pageNVD ↗CISA KEV ↗
#7 87 Immediate CVE-2022-22965 ExigentKEV since 2022 · listed over a yearCISA KEV VMware — Spring Framework JDK 9+ Remote Code Execution Vulnerability KEV, EPSS 99.6%

EVRS 87/100 · EVRS priority: Immediate · Exigent, a flag within Immediate. CVSS severity and EPSS are separate measurements, shown below.

CVSS9.8 (NVD)EPSS99.6% · 99.95th pctlKEV since2022-04-04

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.996.

Full CVE pageNVD ↗CISA KEV ↗
#8 87 Immediate CVE-2023-34048 ExigentKEV since 2024 · listed over a yearCISA KEV VMware — VMware vCenter Server Out-of-Bounds Write Vulnerability KEV, EPSS 99.4%

EVRS 87/100 · EVRS priority: Immediate · Exigent, a flag within Immediate. CVSS severity and EPSS are separate measurements, shown below.

CVSS9.8 (NVD)EPSS99.4% · 99.94th pctlKEV since2024-01-22

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.994.

Full CVE pageNVD ↗CISA KEV ↗Vendor Advisory ↗
#9 87 Immediate CVE-2023-20887 ExigentKEV since 2023 · listed over a yearCISA KEV VMware — Vmware Aria Operations for Networks Command Injection Vulnerability KEV, EPSS 98.3%

EVRS 87/100 · EVRS priority: Immediate · Exigent, a flag within Immediate. CVSS severity and EPSS are separate measurements, shown below.

CVSS9.8 (NVD)EPSS98.3% · 99.92nd pctlKEV since2023-06-22

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.983.

Full CVE pageNVD ↗CISA KEV ↗Vendor Advisory ↗
#10 87 Immediate CVE-2022-22947 ExigentKEV since 2022 · listed over a yearCISA KEV VMware — VMware Spring Cloud Gateway Code Injection Vulnerability KEV, EPSS 98.3%

EVRS 87/100 · EVRS priority: Immediate · Exigent, a flag within Immediate. CVSS severity and EPSS are separate measurements, shown below.

CVSS10.0 (NVD)EPSS98.3% · 99.92nd pctlKEV since2022-05-16

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.983.

Full CVE pageNVD ↗CISA KEV ↗
#11 85 Immediate CVE-2020-3952 ExigentKEV since 2021 · listed over a yearCISA KEV VMware — VMware vCenter Server Information Disclosure Vulnerability KEV, EPSS 90.4%

EVRS 85/100 · EVRS priority: Immediate · Exigent, a flag within Immediate. CVSS severity and EPSS are separate measurements, shown below.

CVSS9.8 (NVD)EPSS90.4% · 99.8th pctlKEV since2021-11-03

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.904.

Full CVE pageNVD ↗CISA KEV ↗
#12 85 Immediate CVE-2021-21975 KEV since 2022 · listed over a yearRansomwareCISA KEV VMware — VMware Server Side Request Forgery in vRealize Operations Manager API KEV + ransomware, EPSS 78.0%

EVRS 85/100 · EVRS priority: Immediate. CVSS severity and EPSS are separate measurements, shown below.

CVSS7.5 (NVD)EPSS78.0% · 99.57th pctlKEV since2022-01-18

Why it matters: Listed in the CISA KEV catalog, and associated with known ransomware campaigns.

Full CVE pageNVD ↗CISA KEV ↗
#13 81 Urgent CVE-2018-6961 KEV since 2022 · listed over a yearCISA KEV VMware — VMware SD-WAN Edge by VeloCloud Command Injection Vulnerability KEV, EPSS 86.3%

EVRS 81/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.

CVSS8.1 (NVD)EPSS86.3% · 99.73rd pctlKEV since2022-03-25

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.863.

Full CVE pageNVD ↗CISA KEV ↗
#14 78 Urgent CVE-2021-21973 KEV since 2022 · listed over a yearCISA KEV VMware — VMware vCenter Server and Cloud Foundation Server Side Request Forgery (SSRF) Vulnerability KEV, EPSS 88.0%

EVRS 78/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.

CVSS5.3 (NVD)EPSS88.0% · 99.77th pctlKEV since2022-03-07

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.880.

Full CVE pageNVD ↗CISA KEV ↗
#15 76 Urgent CVE-2024-38812 KEV since 2024 · listed over a yearCISA KEV VMware — VMware vCenter Server Heap-Based Buffer Overflow Vulnerability KEV, EPSS 54.6%

EVRS 76/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.

CVSS9.8 (NVD)EPSS54.6% · 99.01st pctlKEV since2024-11-20

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.546.

Full CVE pageNVD ↗CISA KEV ↗Vendor Advisory ↗
#16 75 Urgent CVE-2021-22017 KEV since 2022 · listed over a yearCISA KEV VMware — VMware vCenter Server Improper Access Control KEV, EPSS 49.2%

EVRS 75/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.

CVSS5.3 (NVD)EPSS49.2% · 98.9th pctlKEV since2022-01-10

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.492.

Full CVE pageNVD ↗CISA KEV ↗
#17 75 Urgent CVE-2022-22960 KEV since 2022 · listed over a yearCISA KEV VMware — VMware Multiple Products Privilege Escalation Vulnerability KEV, EPSS 35.5%

EVRS 75/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.

CVSS7.8 (NVD)EPSS35.5% · 98.4th pctlKEV since2022-04-15

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.355.

Full CVE pageNVD ↗CISA KEV ↗
#18 75 Urgent CVE-2024-37085 KEV since 2024 · listed over a yearRansomwareCISA KEV VMware — VMware ESXi Authentication Bypass Vulnerability KEV + ransomware, EPSS 26.8%

EVRS 75/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.

CVSS7.2 (NVD)EPSS26.8% · 98th pctlKEV since2024-07-30

Why it matters: Listed in the CISA KEV catalog, and associated with known ransomware campaigns.

Full CVE pageNVD ↗CISA KEV ↗Vendor Advisory ↗
#19 75 Urgent CVE-2024-38813 KEV since 2024 · listed over a yearCISA KEV VMware — VMware vCenter Server Privilege Escalation Vulnerability KEV, EPSS 17.4%

EVRS 75/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.

CVSS9.8 (NVD)EPSS17.4% · 97.1st pctlKEV since2024-11-20

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.174.

Full CVE pageNVD ↗CISA KEV ↗Vendor Advisory ↗
#20 75 Urgent CVE-2020-4006 KEV since 2021 · listed over a yearCISA KEV VMware — Multiple VMware Products Command Injection Vulnerability KEV, EPSS 17.3%

EVRS 75/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.

CVSS9.1 (NVD)EPSS17.3% · 97.1st pctlKEV since2021-11-03

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.173.

Full CVE pageNVD ↗CISA KEV ↗
#21 75 Urgent CVE-2023-20867 KEV since 2023 · listed over a yearCISA KEV VMware — VMware Tools Authentication Bypass Vulnerability KEV, EPSS 13.5%

EVRS 75/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.

CVSS3.9 (NVD)EPSS13.5% · 96.4th pctlKEV since2023-06-23

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.135.

Full CVE pageNVD ↗CISA KEV ↗Vendor Advisory ↗
#22 75 Urgent CVE-2022-22948 KEV since 2024 · listed over a yearCISA KEV VMware — VMware vCenter Server Incorrect Default File Permissions Vulnerability KEV, EPSS 13.3%

EVRS 75/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.

CVSS6.5 (NVD)EPSS13.3% · 96.4th pctlKEV since2024-07-17

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.133.

Full CVE pageNVD ↗CISA KEV ↗Vendor Advisory ↗
#23 75 Urgent CVE-2020-3950 KEV since 2021 · listed over a yearCISA KEV VMware — VMware Multiple Products Privilege Escalation Vulnerability KEV, EPSS 7.3%

EVRS 75/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.

CVSS7.8 (NVD)EPSS7.3% · 94.3rd pctlKEV since2021-11-03

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.073.

Full CVE pageNVD ↗CISA KEV ↗
#24 75 Urgent CVE-2025-22226 KEV since 2025 · listed over a yearCISA KEV VMware — VMware ESXi, Workstation, and Fusion Information Disclosure Vulnerability KEV, EPSS 1.8%

EVRS 75/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.

CVSS6.0 (NVD)EPSS1.8% · 77.7th pctlKEV since2025-03-04

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.018.

Full CVE pageNVD ↗CISA KEV ↗Vendor Advisory ↗
#25 75 Urgent CVE-2025-22224 KEV since 2025 · listed over a yearCISA KEV VMware — VMware ESXi and Workstation TOCTOU Race Condition Vulnerability KEV, EPSS 1.6%

EVRS 75/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.

CVSS8.2 (NVD)EPSS1.6% · 74.8th pctlKEV since2025-03-04

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.016.

Full CVE pageNVD ↗CISA KEV ↗Vendor Advisory ↗
#26 75 Urgent CVE-2025-22225 KEV since 2025 · listed over a yearRansomwareCISA KEV VMware — VMware ESXi Arbitrary Write Vulnerability KEV + ransomware, EPSS 1.0%

EVRS 75/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.

CVSS8.2 (NVD)EPSS1.0% · 62.7th pctlKEV since2025-03-04

Why it matters: Listed in the CISA KEV catalog, and associated with known ransomware campaigns.

Full CVE pageNVD ↗CISA KEV ↗Vendor Advisory ↗