Browse CVEs

HIGH 7.4 CVE-2020-3994 VMware vCenter Server (6.7 before 6.7u3, 6.6 before 6.5u3k) contains a session hijack vulnerability in the vCenter Server Appliance Management Interf… Cloud Foundation 3.9+ Fix from $1,9502020-10-20 MEDIUM 5.9 CVE-2020-3993 VMware NSX-T (3.x before 3.0.2, 2.5.x before 2.5.2.2.0) contains a security vulnerability that exists in the way it allows a KVM host to download and… Cloud Foundation 2.5.2.2.0 / 3.0.2+ Fix from $1,6002020-10-20 MEDIUM 5.8 CVE-2020-3981 VMware ESXi (7.0 before ESXi_7.0.1-0.0.16850804, 6.7 before ESXi670-202008101-SG, 6.5 before ESXi650-202007101-SG), Workstation (15.x), Fusion (11.x … Cloud Foundation 3.10.1 / 4.1+ Fix from $1,6002020-10-20 HIGH 7.1 CVE-2020-3991 VMware Horizon Client for Windows (5.x before 5.5.0) contains a denial-of-service vulnerability due to a file system access control issue during inst… Horizon Client 5.5.0+ Fix from $1,9502020-10-16 MEDIUM 6.5 CVE-2020-3977 VMware Horizon DaaS (7.x and 8.x before 8.0.1 Update 1) contains a broken authentication vulnerability due to a flaw in the way it handled the first … Horizon Daas after 8.0.1 Fix from $1,6002020-09-22 MEDIUM 6.5 CVE-2020-5421EPSS 11% In Spring Framework versions 5.2.0 - 5.2.8, 5.1.0 - 5.1.17, 5.0.0 - 5.0.18, 4.3.0 - 4.3.28, and older unsupported versions, the protections against R… Spring Framework 4.3.29 / 5.0.19+ Fix from $1,6002020-09-19 MEDIUM 6.5 CVE-2020-3990 VMware Workstation (15.x) and Horizon Client for Windows (5.x before 5.4.4) contain an information disclosure vulnerability due to an integer overflo… Horizon Client 5.4.4 / 16.0.0+ Fix from $1,6002020-09-16 MEDIUM 6.1 CVE-2020-3988 VMware Workstation (15.x) and Horizon Client for Windows (5.x before 5.4.4) contain an out-of-bounds read vulnerability in Cortado ThinPrint componen… Horizon Client 5.4.4 / 16.0.0+ Fix from $1,6002020-09-16 MEDIUM 6.7 CVE-2020-3980 VMware Fusion (11.x) contains a privilege escalation vulnerability due to the way it allows configuring the system wide path. An attacker with normal… Fusion 12.0.0+ Fix from $1,6002020-09-16 MEDIUM 6.1 CVE-2020-3986 VMware Workstation (15.x) and Horizon Client for Windows (5.x before 5.4.4) contain an out-of-bounds read vulnerability in Cortado ThinPrint componen… Horizon Client 5.4.4 / 16.0.0+ Fix from $1,6002020-09-16 MEDIUM 6.1 CVE-2020-3987 VMware Workstation (15.x) and Horizon Client for Windows (5.x before 5.4.4) contain an out-of-bounds read vulnerability in Cortado ThinPrint componen… Horizon Client 5.4.4 / 16.0.0+ Fix from $1,6002020-09-16 MEDIUM 5.4 CVE-2020-3975 VMware App Volumes 2.x prior to 2.18.6 and VMware App Volumes 4 prior to 2006 contain a Stored Cross-Site Scripting (XSS) vulnerability. A malicious … App Volumes 2.18.6 / 2006+ Fix from $1,6002020-08-21 MEDIUM 5.3 CVE-2020-3976 VMware ESXi and vCenter Server contain a partial denial of service vulnerability in their respective authentication services. VMware has evaluated th… Cloud Foundation 3.10 / 4.0.1+ Fix from $1,6002020-08-21 MEDIUM 6.5 CVE-2020-5412EPSS 10% Spring Cloud Netflix, versions 2.2.x prior to 2.2.4, versions 2.1.x prior to 2.1.6, and older unsupported versions allow applications to use the Hyst… Spring Cloud Netflix 2.1.6 / 2.2.4+ Fix from $1,6002020-08-07 CRITICAL 9.8 CVE-2020-5413 Spring Integration framework provides Kryo Codec implementations as an alternative for Java (de)serialization. When Kryo is configured with default o… Spring Integration after 19.0 Fix from $2,3002020-07-31 MEDIUM 5.7 CVE-2020-5414 VMware Tanzu Application Service for VMs (2.7.x versions prior to 2.7.19, 2.8.x versions prior to 2.8.13, and 2.9.x versions prior to 2.9.7) contains… Tanzu Application Service For Virtual Machines 2.7.15 / 2.7.19+ Fix from $1,6002020-07-31 CRITICAL 9.1 CVE-2019-11286 VMware GemFire versions prior to 9.10.0, 9.9.1, 9.8.5, and 9.7.5, and VMware Tanzu GemFire for VMs versions prior to 1.11.0, 1.10.1, 1.9.2, and 1.8.2… Gemfire 1.8.2 / 1.9.2+ Fix from $2,3002020-07-31 HIGH 8.8 CVE-2020-5396 VMware GemFire versions prior to 9.10.0, 9.9.2, 9.8.7, and 9.7.6, and VMware Tanzu GemFire for VMs versions prior to 1.11.1 and 1.10.2, when deployed… Gemfire 1.10.2 / 1.11.1+ Fix from $1,9502020-07-31 HIGH 7.8 CVE-2020-3974 VMware Fusion (11.x before 11.5.5), VMware Remote Console for Mac (11.x and prior before 11.2.0 ) and Horizon Client for Mac (5.x and prior before 5.… Fusion 5.4.3 / 11.2.0+ Fix from $1,9502020-07-10 HIGH 8.2 CVE-2020-3968 VMware ESXi (7.0 before ESXi_7.0.0-1.20.16321839, 6.7 before ESXi670-202004101-SG and 6.5 before ESXi650-202005401-SG), Workstation (15.x before 15.5… Cloud Foundation 3.10 / 4.0.1+ Fix from $1,9502020-06-25 HIGH 7.5 CVE-2020-3966 VMware ESXi (7.0 before ESXi_7.0.0-1.20.16321839, 6.7 before ESXi670-202004101-SG and 6.5 before ESXi650-202005401-SG), Workstation (15.x before 15.5… Cloud Foundation 3.10 / 4.0.1+ Fix from $1,9502020-06-25 HIGH 7.5 CVE-2020-3967 VMware ESXi (7.0 before ESXi_7.0.0-1.20.16321839, 6.7 before ESXi670-202004101-SG and 6.5 before ESXi650-202005401-SG), Workstation (15.x before 15.5… Cloud Foundation 3.10 / 4.0.1+ Fix from $1,9502020-06-25 MEDIUM 5.5 CVE-2020-3963 VMware ESXi (7.0 before ESXi_7.0.0-1.20.16321839, 6.7 before ESXi670-202006401-SG and 6.5 before ESXi650-202005401-SG), Workstation (15.x before 15.5… Cloud Foundation 3.10 / 4.0.1+ Fix from $1,6002020-06-25 MEDIUM 5.5 CVE-2020-3965 VMware ESXi (7.0 before ESXi_7.0.0-1.20.16321839, 6.7 before ESXi670-202006401-SG and 6.5 before ESXi650-202005401-SG), Workstation (15.x before 15.5… Cloud Foundation 3.10 / 4.0.1+ Fix from $1,6002020-06-25 MEDIUM 5.5 CVE-2020-3971 VMware ESXi (6.7 before ESXi670-201904101-SG and 6.5 before ESXi650-201907101-SG), Workstation (15.x before 15.0.2), and Fusion (11.x before 11.0.2) … Cloud Foundation 3.7.2 / 11.0.2+ Fix from $1,6002020-06-25 HIGH 8.2 CVE-2020-3962 VMware ESXi (7.0 before ESXi_7.0.0-1.20.16321839, 6.7 before ESXi670-202004101-SG and 6.5 before ESXi650-202005401-SG), Workstation (15.x before 15.5… Cloud Foundation 3.10 / 4.0.1+ Fix from $1,9502020-06-24 HIGH 7.8 CVE-2020-3969 VMware ESXi (7.0 before ESXi_7.0.0-1.20.16321839, 6.7 before ESXi670-202004101-SG and 6.5 before ESXi650-202005401-SG), Workstation (15.x before 15.5… Cloud Foundation 3.10 / 4.0.1+ Fix from $1,9502020-06-24 HIGH 7.8 CVE-2020-3961 VMware Horizon Client for Windows (prior to 5.4.3) contains a privilege escalation vulnerability due to folder permission configuration and unsafe lo… Horizon Client 5.4.3+ Fix from $1,9502020-06-15 HIGH 7.5 CVE-2020-5410 KEVEPSS 96% Spring Cloud Config, versions 2.2.x prior to 2.2.3, versions 2.1.x prior to 2.1.9, and older unsupported versions allow applications to serve arbitra… Spring Cloud Config 2.1.9 / 2.2.3+ Fix from $1,9502020-06-02 HIGH 7.0 CVE-2020-3957 VMware Fusion (11.x before 11.5.5), VMware Remote Console for Mac (11.x and prior) and VMware Horizon Client for Mac (5.x and prior) contain a local … Fusion 11.5.5+ Fix from $1,9502020-05-29