Vulnerability index

Browse CVEs

800 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Cloud Foundation HIGH 7.4
CVE-2020-3994

VMware vCenter Server (6.7 before 6.7u3, 6.6 before 6.5u3k) contains a session hijack vulnerability in the vCenter Server Appliance Management Interf…

Fix: 3.9+
Fix from $1,950 2020-10-20
Cloud Foundation MEDIUM 5.9
CVE-2020-3993

VMware NSX-T (3.x before 3.0.2, 2.5.x before 2.5.2.2.0) contains a security vulnerability that exists in the way it allows a KVM host to download and…

Fix: 2.5.2.2.0 / 3.0.2+
Fix from $1,600 2020-10-20
Cloud Foundation MEDIUM 5.8
CVE-2020-3981

VMware ESXi (7.0 before ESXi_7.0.1-0.0.16850804, 6.7 before ESXi670-202008101-SG, 6.5 before ESXi650-202007101-SG), Workstation (15.x), Fusion (11.x …

Fix: 3.10.1 / 4.1+
Fix from $1,600 2020-10-20
Horizon Client HIGH 7.1
CVE-2020-3991

VMware Horizon Client for Windows (5.x before 5.5.0) contains a denial-of-service vulnerability due to a file system access control issue during inst…

Fix: 5.5.0+
Fix from $1,950 2020-10-16
Horizon Daas MEDIUM 6.5
CVE-2020-3977

VMware Horizon DaaS (7.x and 8.x before 8.0.1 Update 1) contains a broken authentication vulnerability due to a flaw in the way it handled the first …

Fix: after 8.0.1
Fix from $1,600 2020-09-22
Spring Framework MEDIUM 6.5
CVE-2020-5421EPSS 11%

In Spring Framework versions 5.2.0 - 5.2.8, 5.1.0 - 5.1.17, 5.0.0 - 5.0.18, 4.3.0 - 4.3.28, and older unsupported versions, the protections against R…

Fix: 4.3.29 / 5.0.19+
Fix from $1,600 2020-09-19
Horizon Client MEDIUM 6.5
CVE-2020-3990

VMware Workstation (15.x) and Horizon Client for Windows (5.x before 5.4.4) contain an information disclosure vulnerability due to an integer overflo…

Fix: 5.4.4 / 16.0.0+
Fix from $1,600 2020-09-16
Horizon Client MEDIUM 6.1
CVE-2020-3988

VMware Workstation (15.x) and Horizon Client for Windows (5.x before 5.4.4) contain an out-of-bounds read vulnerability in Cortado ThinPrint componen…

Fix: 5.4.4 / 16.0.0+
Fix from $1,600 2020-09-16
Fusion MEDIUM 6.7
CVE-2020-3980

VMware Fusion (11.x) contains a privilege escalation vulnerability due to the way it allows configuring the system wide path. An attacker with normal…

Fix: 12.0.0+
Fix from $1,600 2020-09-16
Horizon Client MEDIUM 6.1
CVE-2020-3986

VMware Workstation (15.x) and Horizon Client for Windows (5.x before 5.4.4) contain an out-of-bounds read vulnerability in Cortado ThinPrint componen…

Fix: 5.4.4 / 16.0.0+
Fix from $1,600 2020-09-16
Horizon Client MEDIUM 6.1
CVE-2020-3987

VMware Workstation (15.x) and Horizon Client for Windows (5.x before 5.4.4) contain an out-of-bounds read vulnerability in Cortado ThinPrint componen…

Fix: 5.4.4 / 16.0.0+
Fix from $1,600 2020-09-16
App Volumes MEDIUM 5.4
CVE-2020-3975

VMware App Volumes 2.x prior to 2.18.6 and VMware App Volumes 4 prior to 2006 contain a Stored Cross-Site Scripting (XSS) vulnerability. A malicious …

Fix: 2.18.6 / 2006+
Fix from $1,600 2020-08-21
Cloud Foundation MEDIUM 5.3
CVE-2020-3976

VMware ESXi and vCenter Server contain a partial denial of service vulnerability in their respective authentication services. VMware has evaluated th…

Fix: 3.10 / 4.0.1+
Fix from $1,600 2020-08-21
Spring Cloud Netflix MEDIUM 6.5
CVE-2020-5412EPSS 10%

Spring Cloud Netflix, versions 2.2.x prior to 2.2.4, versions 2.1.x prior to 2.1.6, and older unsupported versions allow applications to use the Hyst…

Fix: 2.1.6 / 2.2.4+
Fix from $1,600 2020-08-07
Spring Integration CRITICAL 9.8
CVE-2020-5413

Spring Integration framework provides Kryo Codec implementations as an alternative for Java (de)serialization. When Kryo is configured with default o…

Fix: after 19.0
Fix from $2,300 2020-07-31
Tanzu Application Service For Virtual Machines MEDIUM 5.7
CVE-2020-5414

VMware Tanzu Application Service for VMs (2.7.x versions prior to 2.7.19, 2.8.x versions prior to 2.8.13, and 2.9.x versions prior to 2.9.7) contains…

Fix: 2.7.15 / 2.7.19+
Fix from $1,600 2020-07-31
Gemfire CRITICAL 9.1
CVE-2019-11286

VMware GemFire versions prior to 9.10.0, 9.9.1, 9.8.5, and 9.7.5, and VMware Tanzu GemFire for VMs versions prior to 1.11.0, 1.10.1, 1.9.2, and 1.8.2…

Fix: 1.8.2 / 1.9.2+
Fix from $2,300 2020-07-31
Gemfire HIGH 8.8
CVE-2020-5396

VMware GemFire versions prior to 9.10.0, 9.9.2, 9.8.7, and 9.7.6, and VMware Tanzu GemFire for VMs versions prior to 1.11.1 and 1.10.2, when deployed…

Fix: 1.10.2 / 1.11.1+
Fix from $1,950 2020-07-31
Fusion HIGH 7.8
CVE-2020-3974

VMware Fusion (11.x before 11.5.5), VMware Remote Console for Mac (11.x and prior before 11.2.0 ) and Horizon Client for Mac (5.x and prior before 5.…

Fix: 5.4.3 / 11.2.0+
Fix from $1,950 2020-07-10
Cloud Foundation HIGH 8.2
CVE-2020-3968

VMware ESXi (7.0 before ESXi_7.0.0-1.20.16321839, 6.7 before ESXi670-202004101-SG and 6.5 before ESXi650-202005401-SG), Workstation (15.x before 15.5…

Fix: 3.10 / 4.0.1+
Fix from $1,950 2020-06-25
Cloud Foundation HIGH 7.5
CVE-2020-3966

VMware ESXi (7.0 before ESXi_7.0.0-1.20.16321839, 6.7 before ESXi670-202004101-SG and 6.5 before ESXi650-202005401-SG), Workstation (15.x before 15.5…

Fix: 3.10 / 4.0.1+
Fix from $1,950 2020-06-25
Cloud Foundation HIGH 7.5
CVE-2020-3967

VMware ESXi (7.0 before ESXi_7.0.0-1.20.16321839, 6.7 before ESXi670-202004101-SG and 6.5 before ESXi650-202005401-SG), Workstation (15.x before 15.5…

Fix: 3.10 / 4.0.1+
Fix from $1,950 2020-06-25
Cloud Foundation MEDIUM 5.5
CVE-2020-3963

VMware ESXi (7.0 before ESXi_7.0.0-1.20.16321839, 6.7 before ESXi670-202006401-SG and 6.5 before ESXi650-202005401-SG), Workstation (15.x before 15.5…

Fix: 3.10 / 4.0.1+
Fix from $1,600 2020-06-25
Cloud Foundation MEDIUM 5.5
CVE-2020-3965

VMware ESXi (7.0 before ESXi_7.0.0-1.20.16321839, 6.7 before ESXi670-202006401-SG and 6.5 before ESXi650-202005401-SG), Workstation (15.x before 15.5…

Fix: 3.10 / 4.0.1+
Fix from $1,600 2020-06-25
Cloud Foundation MEDIUM 5.5
CVE-2020-3971

VMware ESXi (6.7 before ESXi670-201904101-SG and 6.5 before ESXi650-201907101-SG), Workstation (15.x before 15.0.2), and Fusion (11.x before 11.0.2) …

Fix: 3.7.2 / 11.0.2+
Fix from $1,600 2020-06-25
Cloud Foundation HIGH 8.2
CVE-2020-3962

VMware ESXi (7.0 before ESXi_7.0.0-1.20.16321839, 6.7 before ESXi670-202004101-SG and 6.5 before ESXi650-202005401-SG), Workstation (15.x before 15.5…

Fix: 3.10 / 4.0.1+
Fix from $1,950 2020-06-24
Cloud Foundation HIGH 7.8
CVE-2020-3969

VMware ESXi (7.0 before ESXi_7.0.0-1.20.16321839, 6.7 before ESXi670-202004101-SG and 6.5 before ESXi650-202005401-SG), Workstation (15.x before 15.5…

Fix: 3.10 / 4.0.1+
Fix from $1,950 2020-06-24
Horizon Client HIGH 7.8
CVE-2020-3961

VMware Horizon Client for Windows (prior to 5.4.3) contains a privilege escalation vulnerability due to folder permission configuration and unsafe lo…

Fix: 5.4.3+
Fix from $1,950 2020-06-15
Spring Cloud Config HIGH 7.5
CVE-2020-5410 KEVEPSS 96%

Spring Cloud Config, versions 2.2.x prior to 2.2.3, versions 2.1.x prior to 2.1.9, and older unsupported versions allow applications to serve arbitra…

Fix: 2.1.9 / 2.2.3+
Fix from $1,950 2020-06-02
Fusion HIGH 7.0
CVE-2020-3957

VMware Fusion (11.x before 11.5.5), VMware Remote Console for Mac (11.x and prior) and VMware Horizon Client for Mac (5.x and prior) contain a local …

Fix: 11.5.5+
Fix from $1,950 2020-05-29