vmware Vulnerability Advisory Catalog

Total 863 security vulnerabilities recorded for vmware software and firmware.

← Back to All Vendors
CVE-2015-6931 MEDIUM
Component: vcenter_server

Cross-site scripting (XSS) vulnerability in the vSphere Web Client in VMware vCenter Server 5.0 before U3g, 5.1 before U3d, and 5.5 before U2d allows ...

📅 2016-07-03
CVSS 6.1 Dossier →
Component: vcenter_server

Client Integration Plugin (CIP) in VMware vCenter Server 5.5 U3a, U3b, and U3c and 6.0 before U2; vCloud Director 5.5.5; and vRealize Automation Ident...

📅 2016-04-15
CVSS 7.6 Dossier →
CVE-2016-2075 MEDIUM
Component: vrealize_business_advanced_and_enterprise

Cross-site scripting (XSS) vulnerability in VMware vRealize Business Advanced and Enterprise 8.x before 8.2.5 on Linux allows remote authenticated use...

📅 2016-03-16
CVSS 5.4 Dossier →
CVE-2015-6933 MEDIUM
Component: player

The VMware Tools HGFS (aka Shared Folders) implementation in VMware Workstation 11.x before 11.1.2, VMware Player 7.x before 7.1.2, VMware Fusion 7.x ...

📅 2016-01-09
CVSS 6.3 Dossier →
Component: vcenter_orchestrator

Serialized-object interfaces in VMware vRealize Orchestrator 6.x, vCenter Orchestrator 5.x, vRealize Operations 6.x, vCenter Operations 5.x, and vCent...

📅 2015-12-21
CVSS 7.3 Dossier →
CVE-2015-2342 UNKNOWN
Component: vcenter_server

The JMX RMI service in VMware vCenter Server 5.0 before u3e, 5.1 before u3b, 5.5 before u3, and 6.0 before u1 does not restrict registration of MBeans...

📅 2015-10-12
CVSS 10.0 Dossier →
CVE-2015-1047 UNKNOWN
Component: vcenter_server

vpxd in VMware vCenter Server 5.0 before u3e, 5.1 before u3, and 5.5 before u2 allows remote attackers to cause a denial of service via a long heartbe...

📅 2015-10-12
CVSS 5.0 Dossier →
CVE-2015-6932 UNKNOWN
Component: vcenter_server

VMware vCenter Server 5.5 before u3 and 6.0 before u1 does not verify X.509 certificates from TLS LDAP servers, which allows man-in-the-middle attacke...

📅 2015-09-18
CVSS 5.8 Dossier →
CVE-2015-3650 UNKNOWN
Component: player

vmware-vmx.exe in VMware Workstation 7.x through 10.x before 10.0.7 and 11.x before 11.1.1, VMware Player 5.x and 6.x before 6.0.7 and 7.x before 7.1....

📅 2015-07-10
CVSS 7.2 Dossier →
CVE-2015-2341 UNKNOWN
Component: fusion

VMware Workstation 10.x before 10.0.5, VMware Player 6.x before 6.0.6, and VMware Fusion 6.x before 6.0.6 and 7.x before 7.0.1 allow attackers to caus...

📅 2015-06-13
CVSS 7.8 Dossier →
CVE-2015-2340 UNKNOWN
Component: horizon_client

TPInt.dll in VMware Workstation 10.x before 10.0.6 and 11.x before 11.1.1, VMware Player 6.x before 6.0.6 and 7.x before 7.1.1, and VMware Horizon Cli...

📅 2015-06-13
CVSS 6.1 Dossier →
CVE-2015-2339 UNKNOWN
Component: horizon_client

TPview.dll in VMware Workstation 10.x before 10.0.6 and 11.x before 11.1.1, VMware Player 6.x before 6.0.6 and 7.x before 7.1.1, and VMware Horizon Cl...

📅 2015-06-13
CVSS 6.1 Dossier →
CVE-2015-2338 UNKNOWN
Component: horizon_client

TPview.dll in VMware Workstation 10.x before 10.0.6 and 11.x before 11.1.1, VMware Player 6.x before 6.0.6 and 7.x before 7.1.1, and VMware Horizon Cl...

📅 2015-06-13
CVSS 6.1 Dossier →
CVE-2015-2337 UNKNOWN
Component: fusion

TPInt.dll in VMware Workstation 10.x before 10.0.6 and 11.x before 11.1.1, VMware Player 6.x before 6.0.6 and 7.x before 7.1.1, and VMware Horizon Cli...

📅 2015-06-13
CVSS 5.8 Dossier →
CVE-2015-2336 UNKNOWN
Component: fusion

TPView.dll in VMware Workstation 10.x before 10.0.6 and 11.x before 11.1.1, VMware Player 6.x before 6.0.6 and 7.x before 7.1.1, and VMware Horizon Cl...

📅 2015-06-13
CVSS 5.8 Dossier →
CVE-2014-4632 UNKNOWN
Component: vsphere_data_protection

VMware vSphere Data Protection (VDP) 5.1, 5.5 before 5.5.9, and 5.8 before 5.8.1 and the proxy client in EMC Avamar Data Store (ADS) and Avamar Virtua...

📅 2015-02-01
CVSS 4.3 Dossier →
CVE-2015-1044 UNKNOWN
Component: workstation

vmware-authd (aka the Authorization process) in VMware Workstation 10.x before 10.0.5, VMware Player 6.x before 6.0.5, and VMware ESXi 5.0 through 5.5...

📅 2015-01-29
CVSS 3.3 Dossier →
CVE-2015-1043 UNKNOWN
Component: fusion

The Host Guest File System (HGFS) in VMware Workstation 10.x before 10.0.5, VMware Player 6.x before 6.0.5, and VMware Fusion 6.x before 6.0.5 and 7.x...

📅 2015-01-29
CVSS 3.3 Dossier →
CVE-2014-8370 UNKNOWN
Component: player

VMware Workstation 10.x before 10.0.5, VMware Player 6.x before 6.0.5, VMware Fusion 6.x before 6.0.5, and VMware ESXi 5.0 through 5.5 allow host OS u...

📅 2015-01-29
CVSS 6.4 Dossier →
CVE-2014-8373 UNKNOWN
Component: vcloud_automation_center

The VMware Remote Console (VMRC) function in VMware vCloud Automation Center (vCAC) 6.0.1 through 6.1.1 allows remote authenticated users to gain priv...

📅 2014-12-11
CVSS 9.0 Dossier →
CVE-2014-8372 UNKNOWN
Component: airwatch

AirWatch by VMware On-Premise 7.3.x before 7.3.3.0 (FP3) allows remote authenticated users to obtain the organizational information and statistics fro...

📅 2014-12-11
CVSS 4.0 Dossier →
CVE-2014-8371 UNKNOWN
Component: vcenter_server_appliance

VMware vCenter Server Appliance (vCSA) 5.5 before Update 2, 5.1 before Update 3, and 5.0 before Update 3c does not properly validate certificates when...

📅 2014-12-08
CVSS 4.3 Dossier →
CVE-2014-3797 UNKNOWN
Component: vcenter_server_appliance

Cross-site scripting (XSS) vulnerability in VMware vCenter Server Appliance (vCSA) 5.1 before Update 3 allows remote attackers to inject arbitrary web...

📅 2014-12-08
CVSS 4.3 Dossier →
CVE-2014-3796 UNKNOWN
Component: nsx

VMware NSX 6.0 before 6.0.6, and vCloud Networking and Security (vCNS) 5.1 before 5.1.4.2 and 5.5 before 5.5.3, does not properly validate input, whic...

📅 2014-09-15
CVSS 5.0 Dossier →
Page 28 of 36 (863 Total Records)