目標達成 すべての支援者に感謝 — 100%達成しました！

目標: 1000 CNY · 調達済み: 1336 CNY

100%
コーヒーを一杯おごる

VMware 厂商漏洞列表 / CVE 中文分析 233

VMware 厂商相关 233 条 CVE 漏洞，含 AI 中文分析、POC、CVSS 评分与受影响产品。

VMware 主要提供虚拟化及云基础架构解决方案，其软件生态因广泛部署而成为攻击重点。历史漏洞多涉及远程代码执行、权限提升及跨站脚本，常源于内存处理缺陷或配置不当。近期重大事件包括被勒索软件组织攻击导致数据泄露，促使厂商强化供应链安全与补丁响应机制。鉴于已收录 219 条 CVE，用户需持续更新组件以缓解潜在风险，确保基础设施稳定性。

上位製品 VMware: Workstation ESXi VMware ESXi VMware Aria Operations SALT Avi Load Balancer Spring Framework Workstation Pro/Player vCenter Server VMware vCenter Server (vCenter Server) Spring AI Fusion VMware Aria Operations for Logs VCF operations Cloud Foundation vRealize Automation Workstation and Fusion VMware Aria Automation VMware ESXi, Workstation, and Fusion VMware Tools vRealize Operations for Horizon Adapter VMware NSX Airwatch Console VMware vCenter Server VMware Enhanced Authentication Plug-in (EAP) VMware Horizon Agent for Linux VMware Workstation VMware Workstation and Fusion VMware Fusion Salt Project
CVE IDタイトルCVSS深刻度公開日
CVE-2024-22231 Syndic cache directory creation is vulnerable to a directory traversal attack — Salt Project 5.0 Medium2024-06-27
CVE-2024-22266 VMware Avi Load Balancer updates address multiple vulnerabilities — VMware Avi Load Balancer 6.5 Medium2024-05-08
CVE-2024-22264 VMware Avi Load Balancer updates address multiple vulnerabilities — VMware Avi Load Balancer 7.2 High2024-05-08
CVE-2024-22250 Session Hijack Vulnerability in Deprecated EAP Browser Plugin — VMware Enhanced Authentication Plug-in (EAP)CWE-384 7.8 High2024-02-20
CVE-2024-22245 Arbitrary Authentication Relay Vulnerability in Deprecated EAP Browser Plugin — VMware Enhanced Authentication Plug-in (EAP)CWE-287 9.6 Critical2024-02-20
CVE-2023-34056 VMware vCenter Server Partial Information Disclosure Vulnerability — VMware vCenter Server 4.3 Medium2023-10-25
CVE-2023-34048 VMware vCenter Server Out-of-Bounds Write Vulnerability — VMware vCenter Server 9.8 Critical2023-10-25
CVE-2023-34045 VMware Fusion installer local privilege escalation — Fusion 6.6 Medium2023-10-20
CVE-2023-34046 VMware Fusion TOCTOU local privilege escalation vulnerability — Fusion 6.7 Medium2023-10-20
CVE-2023-34044 Information disclosure vulnerability in bluetooth device-sharing functionality — Workstation 7.1 High2023-10-20
CVE-2023-20891 VMware Tanzu Application Service for VMs and Isolation Segment information disclosure vulnerability — VMware Tanzu Application Service for VMsCWE-532 6.5 Medium2023-07-26
CVE-2023-20896 VMware vCenter Server 缓冲区错误漏洞 — VMware vCenter Server (vCenter Server) 5.9 Medium2023-06-22
CVE-2023-20895 VMware vCenter Server 缓冲区错误漏洞 — VMware vCenter Server (vCenter Server) 8.1 High2023-06-22
CVE-2023-20894 VMware vCenter Server 缓冲区错误漏洞 — VMware vCenter Server (vCenter Server) 8.1 High2023-06-22
CVE-2023-20893 VMware vCenter Server 资源管理错误漏洞 — VMware vCenter Server (vCenter Server) 8.1 High2023-06-22
CVE-2023-20892 VMware vCenter Server heap-overflow vulnerability — VMware vCenter Server (vCenter Server) 8.1 High2023-06-22
CVE-2023-20867 VMware Tools Authentication Bypass Vulnerability — VMware ToolsCWE-287 3.9 Low2023-06-13
CVE-2022-22964 VMware Horizon 权限许可和访问控制问题漏洞 — VMware Horizon Agent for Linux 7.8 -2022-04-11
CVE-2022-22962 VMware Horizon 后置链接漏洞 — VMware Horizon Agent for Linux 7.8 -2022-04-11
CVE-2020-3971 多款VMware产品缓冲区错误漏洞 — VMware ESXi 7.1 -2020-06-25
CVE-2020-3965 多款VMware产品缓冲区错误漏洞 — VMware ESXi 4.7 -2020-06-25
CVE-2020-3964 多款VMware产品信息泄露漏洞 — VMware ESXi 4.7 -2020-06-25
CVE-2020-3963 多款VMware产品资源管理错误漏洞 — VMware ESXi 8.8 -2020-06-25
CVE-2020-3966 多款VMware产品竞争条件问题漏洞 — VMware ESXi 7.5 -2020-06-25
CVE-2020-3968 多款VMware产品缓冲区错误漏洞 — VMware ESXi 8.2 -2020-06-25
CVE-2020-3967 多款VMware产品缓冲区错误漏洞 — VMware ESXi 7.5 -2020-06-25
CVE-2020-3970 多款VMware产品缓冲区错误漏洞 — VMware ESXi 6.5 -2020-06-25
CVE-2020-3962 多款VMware产品资源管理错误漏洞 — VMware ESXi 7.5 -2020-06-24
CVE-2020-3969 多款VMware产品安全漏洞 — VMware ESXi 7.5 -2020-06-24
CVE-2020-3959 VMware ESXi、VMware Workstation和VMware Fusion VMCI模块缓冲区错误漏洞 — VMware ESXi 3.3 -2020-05-29

本页汇总了 VMware 厂商截至目前公开的全部 233 条 CVE 漏洞。每条漏洞均包含 CVSS 评分、CWE 弱点分类、受影响产品与参考链接，并附带 AI 生成的中文分析以便快速判断风险。