주요 제품 취약점 (13건)
"VMware vCenter" 관련 CVE만 표시 중 · 필터 해제 ×
| 기술 | CVE | 심각도 | 유형 | KEV | 등재일 |
|---|---|---|---|---|---|
|
VMware vCenter
Broadcom VMware vCenter
VMware vCenter contains a directory traversal vulnerability in the Syslog server. A malicious actor with network access to vCenter may exploit this i…
|
CVE-2026-59310 | 9.8 | CWE-22 | KEV | 2026-08-18 |
|
VMware vCenter
Broadcom VMware vCenter Server
vCenter Server contains a heap-overflow vulnerability in the implementation of the DCERPC protocol. A malicious actor with network access to vCenter …
|
CVE-2024-37079 | 9.8 | CWE-787 | KEV | 2026-01-23 |
|
VMware vCenter
VMware vCenter Server
The vCenter Server contains a heap-overflow vulnerability in the implementation of the DCERPC protocol. A malicious actor with network access to vCen…
|
CVE-2024-38812 | 9.8 | CWE-122 | KEV | 2024-11-20 |
|
VMware vCenter
VMware vCenter Server
vCenter Server contains an out-of-bounds write vulnerability in the implementation of the DCERPC protocol. A malicious actor with network access to v…
|
CVE-2023-34048 | 9.8 | CWE-787 | KEV | 2024-01-22 |
|
VMware vCenter
VMware vCenter Server
The vCenter Server contains an arbitrary file upload vulnerability in the Analytics service. A malicious actor with network access to port 443 on vCe…
|
CVE-2021-22005 | 9.8 | CWE-22 | KEV | 2021-11-03 |
|
VMware vCenter
VMware vCenter Server
The vSphere Client (HTML5) contains a remote code execution vulnerability due to lack of input validation in the Virtual SAN Health Check plug-in whi…
|
CVE-2021-21985 | 9.8 | CWE-918 | KEV | 2021-11-03 |
|
VMware vCenter
VMware vCenter Server
The vSphere Client (HTML5) contains a remote code execution vulnerability in a vCenter Server plugin. A malicious actor with network access to port 4…
|
CVE-2021-21972 | 9.8 | CWE-22 | KEV | 2021-11-03 |
|
VMware vCenter
VMware vCenter Server
Under certain conditions, vmdir that ships with VMware vCenter Server, as part of an embedded or external Platform Services Controller (PSC), does no…
|
CVE-2020-3952 | 9.8 | CWE-306 | KEV | 2021-11-03 |
|
VMware vCenter
VMware vCenter Server
The vCenter Server contains a privilege escalation vulnerability. A malicious actor with network access to vCenter Server may trigger this vulnerabil…
|
CVE-2024-38813 | 7.5 | CWE-250 | KEV | 2024-11-20 |
|
VMware vCenter
VMware vCenter Server
The vCenter Server contains an information disclosure vulnerability due to improper permission of files. A malicious actor with non-administrative ac…
|
CVE-2022-22948 | 6.5 | CWE-276 | KEV | 2024-07-17 |
|
VMware vCenter
VMware vCenter Server and Cloud Foundation
The vSphere Client (HTML5) contains an SSRF (Server Side Request Forgery) vulnerability due to improper validation of URLs in a vCenter Server plugin…
|
CVE-2021-21973 | 5.3 | CWE-918 | KEV | 2022-03-07 |
|
VMware vCenter
VMware vCenter Server
Rhttproxy as used in vCenter Server contains a vulnerability due to improper implementation of URI normalization. A malicious actor with network acce…
|
CVE-2021-22017 | 5.3 | — | KEV | 2022-01-10 |
|
VMware vCenter
VMware vCenter contains an authentication bypass vulnerability in the VMware Directory Service. A malicious actor with network access to vCenter may …
|
CVE-2026-59309 | 9.8 | CWE-303 | — |