VMware security briefs
9 published alerts for VMware products and services.
VMware ESXi Arbitrary Write Vulnerability
VMware ESXi is listed in CISA's Known Exploited Vulnerabilities catalog (CVE-2025-22225). VMware ESXi contains an arbitrary write vulnerability. Successful exploitation allows an attacker with privileges within the VMX process to trigger an arbitrary kernel write leading to an escape of the sandbox. CISA remediation due date: 2025-03-25. If you need help checking exposure, call (864) 335-9223.
VMware ESXi Authentication Bypass Vulnerability
VMware ESXi is listed in CISA's Known Exploited Vulnerabilities catalog (CVE-2024-37085). VMware ESXi contains an authentication bypass vulnerability. A malicious actor with sufficient Active Directory (AD) permissions can gain full access to an ESXi host that was previously configured to use AD for user management by re-creating the configured AD group ('ESXi Admins' by default) after it was deleted from AD. CISA remediation due date: 2024-08-20. If you need help checking exposure, call (864) 335-9223.
VMware Workspace ONE Access and Identity Manager Server-Side Template Injection Vulnerability
VMware Workspace ONE Access and Identity Manager is listed in CISA's Known Exploited Vulnerabilities catalog (CVE-2022-22954). VMware Workspace ONE Access and Identity Manager allow for remote code execution due to server-side template injection. CISA remediation due date: 2022-05-05. If you need help checking exposure, call (864) 335-9223.
VMware Server Side Request Forgery in vRealize Operations Manager API vulnerability
VMware vRealize Operations Manager API is listed in CISA's Known Exploited Vulnerabilities catalog (CVE-2021-21975). Server Side Request Forgery (SSRF) in vRealize Operations Manager API prior to 8.4 may allow a malicious actor with network access to the vRealize Operations Manager API to perform a SSRF attack to steal administrative credentials. CISA remediation due date: 2022-02-01. If you need help checking exposure, call (864) 335-9223.
VMware vCenter Server File Upload Vulnerability
VMware vCenter Server is listed in CISA's Known Exploited Vulnerabilities catalog (CVE-2021-22005). VMware vCenter Server contains a file upload vulnerability in the Analytics service that allows a user with network access to port 443 to execute code. CISA remediation due date: 2021-11-17. If you need help checking exposure, call (864) 335-9223.
VMware vCenter Server Improper Input Validation Vulnerability
VMware vCenter Server is listed in CISA's Known Exploited Vulnerabilities catalog (CVE-2021-21985). VMware vSphere Client contains an improper input validation vulnerability in the Virtual SAN Health Check plug-in, which is enabled by default in vCenter Server, which allows for remote code execution. CISA remediation due date: 2021-11-17. If you need help checking exposure, call (864) 335-9223.
VMware vCenter Server Remote Code Execution Vulnerability
VMware vCenter Server is listed in CISA's Known Exploited Vulnerabilities catalog (CVE-2021-21972). VMware vCenter Server vSphere Client contains a remote code execution vulnerability in a vCenter Server plugin which allows an attacker with network access to port 443 to execute commands with unrestricted privileges on the underlying operating system. CISA remediation due date: 2021-11-17. If you need help checking exposure, call (864) 335-9223.
VMware ESXi OpenSLP Use-After-Free Vulnerability
VMware ESXi is listed in CISA's Known Exploited Vulnerabilities catalog (CVE-2020-3992). VMware ESXi OpenSLP contains a use-after-free vulnerability that allows an attacker residing in the management network with access to port 427 to perform remote code execution. CISA remediation due date: 2022-05-03. If you need help checking exposure, call (864) 335-9223.
VMware ESXi and Horizon DaaS OpenSLP Heap-Based Buffer Overflow Vulnerability
VMware VMware ESXi and Horizon DaaS is listed in CISA's Known Exploited Vulnerabilities catalog (CVE-2019-5544). VMware ESXi and Horizon Desktop as a Service (DaaS) OpenSLP contains a heap-based buffer overflow vulnerability that allows an attacker with network access to port 427 to overwrite the heap of the OpenSLP service to perform remote code execution. CISA remediation due date: 2022-05-03. If you need help checking exposure, call (864) 335-9223.