Vmware الثغرات

التسلسل الزمني

النوع

منتج

VMware Workstation173
VMware Fusion102
VMware ESXi98
VMware Player78
VMware vCenter Server64

معالجة

Official Fix664
Temporary Fix0
Workaround5
Unavailable8
Not Defined68

قابلية الاستغلال

High36
Functional4
Proof-of-Concept124
Unproven29
Not Defined552

متجه الوصول

Not Defined0
Physical4
Local225
Adjacent91
Network425

توثيق

Not Defined0
High56
Low315
None374

تفاعل المستخدم

Not Defined0
Required77
None668

C3BM Index

CVSSv3 Base

≤10
≤20
≤311
≤452
≤584
≤6162
≤7143
≤8148
≤971
≤1074

CVSSv3 Temp

≤10
≤21
≤313
≤460
≤5114
≤6159
≤7158
≤8117
≤986
≤1037

VulDB

≤10
≤22
≤324
≤484
≤592
≤6181
≤7107
≤8130
≤953
≤1072

NVD

≤10
≤20
≤30
≤48
≤515
≤659
≤762
≤8110
≤952
≤1055

CNA

≤10
≤20
≤30
≤42
≤55
≤610
≤78
≤814
≤99
≤108

المجهز

≤10
≤20
≤30
≤40
≤50
≤61
≤71
≤80
≤91
≤104

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤91
≤100

إكسبلويت ذات هجوم فوري

<1k1
<2k17
<5k86
<10k246
<25k314
<50k70
<100k11
≥100k0

إكسبلويت اليوم

<1k583
<2k64
<5k63
<10k27
<25k8
<50k0
<100k0
≥100k0

حجم سوق الإكسبلويت

🔴 CTI النشاطات

Affected Products (167): ACE (11), Access Connector (1), AirWatch (3), AirWatch Agent (2), AirWatch Console (3), AirWatch Inbox (2), AirWatch Launcher (1), App Volumes (2), Aria Automation (1), Aria Operations (7), Aria Operations for Logs (4), Aria Operations for Networks (10), CNS Edge (1), Carbon Black App Control (4), Carbon Black Cloud Workload Appliance (1), Center (6), Center CapacityIQ (1), Center Chargeback Manager (1), Center Operations (2), Center Server (64), Center Server Appliance (8), Center Update Manager (1), Cloud Automation Center (1), Cloud Director (4), Cloud Director Appliance (1), Cloud Director for Service Providers (1), Cloud Foundation (26), Cloud Foundation ESXi (2), Connectors (1), ESX (24), ESX Server (16), ESXi (99), ESXi Server (2), Enhanced Authentication Plug-in (2), Enterprise (1), Fabric tc Server (1), Fusion (102), Fusion Pro (4), GSX Server (2), GemFire (2), HCX (1), Horizon (1), Horizon Client (19), Horizon Client for Mac (3), Horizon Connection Server (1), Horizon DaaS (3), Horizon Server (3), Horizon View (3), Horizon View Agent (2), Horizon View Client (11), Hyperic Agent (1), Hyperic HQ (2), Hyperic HQ Groovy Script Console (1), Hyperic Server (2), Identity Manager (26), Identity Manager Connector (1), Isolation Segment (1), Movie Decoder (1), NSX (1), NSX-T (3), NSX-V Edge (1), NSX Data Center for vSphere (1), NSX Edge (2), NSX SD-WAN Edge (1), OVF Tool (1), Open Virtual Machine Tools (1), Photon (1), Photon OS (2), Pinniped (2), Pivotal Scheduler (1), Player (80), RabbitMQ (2), Reactor Netty (1), Realize Automation (24), Realize Business Advance (1), Realize Business for Cloud (1), Realize Log Insight (14), Realize Network Insight (2), Realize Operations (16), Realize Operations Manager API (6), Realize Operations Tenant App (1), Realize Orchestrator (3), Realize Suite Lifecycle Manager (2), Remote Console (3), Remote Console for Mac (3), SD-WAN (1), SD-WAN Edge (3), SD-WAN Orchestrator (7), Server (32), Shield Manager (1), Sphere Client (5), Sphere Data Protection (9), Sphere ESXi (1), Sphere Integrated Containers (1), Sphere Replication (1), Sphere Web Client (3), Spring (4), Spring-integration-zip (1), Spring AMQP (3), Spring Authorization Server (1), Spring Boot (5), Spring Cloud Data Flow (1), Spring Cloud Function (2), Spring Cloud Gateway (3), Spring Cloud Netflix Zuul (1), Spring Cloud OpenFeign (1), Spring Cloud Task (1), Spring Data MongoDB (1), Spring Data REST (2), Spring Framework (13), Spring HATEOAS (1), Spring Reactor Netty (1), Spring Security (12), Spring Security OAuth (1), Spring Session (1), SpringSource Spring Security (5), Spring Tools (1), Spring Vault (1), Spring for Apache Kafka (1), Spring for GraphQL (1), Stage Manager (1), Studio (3), Support Tools (2), Tanzu (1), Tanzu Application Service for VMs (3), Tanzu GemFire for VMs (2), Thinapp (1), Tivoli Storage Manager for Virtual Environments (1), Tools (18), Unified Access Gateway (1), V4H (1), V4PA (1), VI-Client (1), VIX API (1), VMRC (1), VSCode Extension (1), Velero (1), View (6), View Manager (1), View Planner (1), Virtual Center (1), VirtualCenter (4), Virtual Infrastructure (1), Workspace ONE Access (27), Workspace ONE Assist (5), Workspace ONE Boxer (1), Workspace ONE Content (1), Workspace ONE Launcher (1), Workspace ONE SDK (1), Workspace ONE UEM Console (2), Workspace ONE Unified Endpoint Management Console (1), Workspace One Access (1), Workspace one UEM Console (2), Workstation (177), Workstation Player (6), Workstation Pro (12), Xenon (1), Zimbra (1), Zimbra Collaboration Suite (2), Zimbra Collection Suite (1), Zimbra Desktop (1), Zimbra Web Client (1), macOS Sensor for VMware Carbon Black Cloud (1), open-vm-tools (2), tc Server (1), vMA (1), workstation (1)

Link to Vendor Website: https://www.vmware.com/

منشورBaseTempالثغرةProdق�معالجةEPSSCTICVE
16/04/20246.26.1Vmware Spring Framework URL Parser UriComponentsBuilder Redirectغير معروفNot DefinedOfficial Fix0.000430.00CVE-2024-22262
02/04/20244.34.1Vmware SD-WAN Orchestrator RedirectNetwork Management SoftwareNot DefinedOfficial Fix0.000430.02CVE-2024-22248
02/04/20244.34.1Vmware SD-WAN Edge BIOS Configuration توثيق ضعيفNetwork Management SoftwareNot DefinedOfficial Fix0.000430.00CVE-2024-22247
02/04/20247.06.7Vmware SD-WAN Edge تجاوز الصلاحياتNetwork Management SoftwareNot DefinedOfficial Fix0.000430.05CVE-2024-22246
20/03/20245.75.6Vmware Spring Authorization Server PKCE تشفير ضعيفغير معروفNot DefinedOfficial Fix0.000430.06CVE-2024-22258
18/03/20247.77.6Vmware Spring Security AuthenticatedVoter تجاوز الصلاحياتغير معروفNot DefinedOfficial Fix0.000430.03CVE-2024-22257
16/03/20247.27.0VMware Spring Framework UriComponentsBuilder تجاوز الصلاحياتغير معروفNot DefinedOfficial Fix0.000430.00CVE-2024-22259
07/03/20247.67.5VMware Cloud Director Organization Name الكشف عن المعلوماتCloud SoftwareNot DefinedOfficial Fix0.000430.06CVE-2024-22256
05/03/20246.05.9VMware ESXi/Cloud Foundation VMX Process تلف الذاكرةCloud SoftwareNot DefinedOfficial Fix0.000430.09CVE-2024-22254
05/03/20248.07.8VMware ESXi/Workstation/Fusion/Cloud Foundation UHCI USB Controller تلف الذاكرةVirtualization SoftwareNot DefinedOfficial Fix0.000430.05CVE-2024-22253
05/03/20248.07.8VMware ESXi/Workstation/Fusion/Cloud Foundation XHCI USB Controller تلف الذاكرةVirtualization SoftwareNot DefinedOfficial Fix0.000430.09CVE-2024-22252
05/03/20244.74.6VMware ESXi/Workstation/Fusion/Cloud Foundation UHCI USB Controller الكشف عن المعلوماتVirtualization SoftwareNot DefinedOfficial Fix0.000430.03CVE-2024-22255
27/02/20244.14.0VMware Workstation/Fusion USB CCID الكشف عن المعلوماتVirtualization SoftwareNot DefinedOfficial Fix0.000430.05CVE-2024-22251
23/02/20247.27.0VMware Spring Framework URL Parser UriComponentsBuilder تجاوز الصلاحياتغير معروفNot DefinedOfficial Fix0.000430.13CVE-2024-22243
21/02/20246.76.5VMware Aria Operations Local Privilege Escalationغير معروفNot DefinedOfficial Fix0.000430.05CVE-2024-22235
20/02/20248.07.9VMware Enhanced Authentication Plug-in توثيق ضعيفغير معروفNot DefinedWorkaround0.000430.04CVE-2024-22250
20/02/20249.29.1VMware Enhanced Authentication Plug-in Active Directory توثيق ضعيفغير معروفNot DefinedWorkaround0.000430.05CVE-2024-22245
20/02/20246.56.4VMware Spring Security AuthenticationTrustResolver.isFullyAuthenticated تجاوز الصلاحياتغير معروفNot DefinedOfficial Fix0.000430.00CVE-2024-22234
06/02/20243.83.8VMware Aria Operations for Networks سكربتات مشتركةغير معروفNot DefinedOfficial Fix0.000430.02CVE-2024-22241
06/02/20243.83.7VMware Aria Operations for Networks الكشف عن المعلوماتغير معروفNot DefinedOfficial Fix0.000460.02CVE-2024-22240
06/02/20246.16.1VMware Aria Operations for Networks Console تجاوز الصلاحياتغير معروفNot DefinedOfficial Fix0.000420.02CVE-2024-22239
06/02/20244.54.5VMware Aria Operations for Networks سكربتات مشتركةغير معروفNot DefinedOfficial Fix0.000430.02CVE-2024-22238
06/02/20247.87.6VMware Aria Operations for Networks تجاوز الصلاحياتغير معروفNot DefinedOfficial Fix0.000420.03CVE-2024-22237
06/02/20244.24.2VMware Spring Security spring-security.xsd تجاوز الصلاحياتغير معروفNot DefinedOfficial Fix0.000420.00CVE-2023-34042
22/01/20247.57.3VMware Spring Framework HTTP Request الحرمان من الخدمةغير معروفNot DefinedOfficial Fix0.000520.00CVE-2024-22233

720 بعض الادخالات لم يتم عرضها

Do you need the next level of professionalism?

Upgrade your account now!