Veille CVE

Recherche « VMware vCenter »

4 CVE

Critique 3 Élevée 0 Moyenne 1 Faible 0 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « VMware vCenter » ✕
  1. CVE-2026-59310 9.8 Critique Exploitée Rançongiciel

    VMware Cloud Foundation · VMware vSphere Foundation · VMware vCenter · VMware Telco Cloud Infrastructure

    VMware vCenter contains a directory traversal vulnerability in the Syslog server. A malicious actor with network access to vCenter may exploit this issue to execute arbitrary code.

  2. CVE-2026-59309 9.8 Critique

    VMware Cloud Foundation · VMware vSphere Foundation · VMware vCenter · VMware Telco Cloud Infrastructure

    VMware vCenter contains an authentication bypass vulnerability in the VMware Directory Service. A malicious actor with network access to vCenter may exploit this issue to bypass authentication and gain unauthorized access to the system.

  3. CVE-2024-37079 9.8 Critique Exploitée

    VMware vCenter Server · VMware Cloud Foundation

    vCenter Server contains a heap-overflow vulnerability in the implementation of the DCERPC protocol. A malicious actor with network access to vCenter Server may trigger this vulnerability by sending a specially crafted network packet potentially leading to remote code execution.

  4. CVE-2021-21973 5.3 Moyenne Exploitée

    VMware vCenter Server · VMware Cloud Foundation

    The vSphere Client (HTML5) contains an SSRF (Server Side Request Forgery) vulnerability due to improper validation of URLs in a vCenter Server plugin. A malicious actor with network access to port 443 may exploit this issue by sending a POST request to vCenter Server plugin leading to information disclosure. This affects: VMware vCenter Server (7.x before 7.0 U1c, 6.7 before 6.7 U3l and 6.5 before 6.5 U3n) and VMware Cloud Foundation (4.x before 4.2 and 3.x before 3.10.1.2).