VMware VMware Cloud Foundation Schwachstellen (CVE)

Für VMware VMware Cloud Foundation veröffentlichte CVE-Einträge, neueste zuerst. Folgen Sie, um bei neuen Einträgen eine E-Mail zu erhalten.

5 Ergebnisse
6.2Mittel
CVE-2026-22721

VMware Aria Operations privilege escalation vulnerability

VMware VMware Aria Operations; VMware VMware Cloud Foundation; VMware VMware Telco Cloud Platform; VMware VMware Telco Cloud Infrastructure

VMware Aria Operations contains a privilege escalation vulnerability. A malicious actor with privileges in vCenter to access Aria Operations may leverage this vulnerability to obtain administrative access in VMware Aria Operations. To remediate CVE-2026-22721…

4.9Mittel
CVE-2025-41245

VMSA-2025-0015: VMware Aria Operations and VMware Tools updates address multiple vulnerabilities (CVE-2025-41244,CVE-2025-41245, CVE-2025-41246)

VMware VMware Aria Operations; VMware VMware Cloud Foundation; VMware VMware Telco Cloud Platform; VMware VMware Telco Cloud Infrastructure

VMware Aria Operations contains an information disclosure vulnerability. A malicious actor with non-administrative privileges in Aria Operations may exploit this vulnerability to disclose credentials of other users of Aria Operations.

7.8Hoch
CVE-2025-41244 KEV

VMSA-2025-0015: VMware Aria Operations and VMware Tools updates address multiple vulnerabilities (CVE-2025-41244,CVE-2025-41245, CVE-2025-41246)

VMware VCF operations; VMware VMware tools; VMware VMware Aria Operations; VMware VMware Cloud Foundation

VMware Aria Operations and VMware Tools contain a local privilege escalation vulnerability. A malicious local actor with non-administrative privileges having access to a VM with VMware Tools installed and managed by Aria Operations with SDMP enabled may explo…

8.6%EPSS
8.2Hoch
CVE-2025-22249

VMSA-2025-0008: VMware Aria automation updates address a DOM based Cross-site scripting vulnerability (CVE-2025-22249)

VMware Vmware Aria Automation; VMware VMware Cloud Foundation; VMware VMware Telco Cloud Platform

VMware Aria automation contains a DOM based Cross-Site Scripting (XSS) vulnerability. A malicious actor may exploit this issue to steal the access token of a logged in user of VMware Aria automation appliance by tricking the user into clicking a malicious cra…

9.3Kritisch
CVE-2025-22224 KEV

VMware ESXi and Workstation TOCTOU Race Condition Vulnerability

VMware ESXi; VMware Workstation; VMware VMware Cloud Foundation; VMware Telco Cloud Platform

VMware ESXi, and Workstation contain a TOCTOU (Time-of-Check Time-of-Use) vulnerability that leads to an out-of-bounds write. A malicious actor with local administrative privileges on a virtual machine may exploit this issue to execute code as the virtual mac…

1.6%EPSS