VMware VMware Cloud Foundation
5 vulnérabilités publiées citent ce produit.
Tel que les CNA l’écrivent dans leurs fiches CVE (éditeur et produit) ; les versions sont les leurs.
| CVE | Versions vulnérables | Titre | Sévérité | Publiée | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2026-22721 | 4.0 – < 5.2.3 ; 9.0 – < 9.0.2 | VMware Aria Operations privilege escalation vulnerability | HIGH 7.2 | 0.7 % | ||
| CVE-2025-41245 | 5.x – < 8.18.5 ; 4.x – < 8.18.5 | VMSA-2025-0015: VMware Aria Operations and VMware Tools updates address multiple vulnerabilities (CVE-2025-41244,CVE-2025-41245, CVE-2025… | MEDIUM 4.9 | 0.6 % | ||
| CVE-2025-41244 | 5.x – < 8.18.5 ; 4.x – < 8.18.5 | VMSA-2025-0015: VMware Aria Operations and VMware Tools updates address multiple vulnerabilities (CVE-2025-41244,CVE-2025-41245, CVE-2025… | HIGH 7.8 | 8.6 % | KEV | |
| CVE-2025-22249 | 5.x – < 8.18.1 patch 2 ; 4.x – < 8.18.1 patch 2 | VMSA-2025-0008: VMware Aria automation updates address a DOM based Cross-site scripting vulnerability (CVE-2025-22249) | HIGH 8.2 | 0.4 % | ||
| CVE-2025-22224 | 5.x, 4.5.x | VMware ESXi, and Workstation contain a TOCTOU (Time-of-Check Time-of-Use) vulnerability that leads to an out-of-bounds write. A malicious ac | CRITICAL 9.3 | 1.6 % | KEV |