CF
Product
Cloud Foundation
On CISA KEVExploited in the wildRansomware-linked
141
CVEs
22
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 21High 66Medium 50Low 4
Watch
Add Cloud Foundation to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-59310 RansomwareIn wildKEV | 9.8 | Jul 30 | vCenter directory-traversal vulnerability Affected: 9.1.x.x; 9.0.x.x; 5.x |
| CVE-2024-38813 In wildKEV | 9.8 | Sep 17 | Privilege escalation vulnerability Affected: 4.0 before 5.2 |
| CVE-2024-38812 In wildKEV | 9.8 | Sep 17 | Heap-overflow vulnerability Affected: 4.0 before 5.2 |
| CVE-2024-37079 In wildKEV | 9.8 | Jun 18 | Broadcom VMware vCenter Server Out-of-bounds Write Vulnerability Affected: 4.0 before 5.2 |
| CVE-2023-34048 In wildKEV | 9.8 | Oct 25 | VMware vCenter Server Out-of-Bounds Write Vulnerability Affected: 4.0 before KB88287; 5.0 before KB88287 |
| CVE-2022-22954 RansomwareIn wildKEV | 9.8 | Apr 11 | VMware Workspace ONE Access and Identity Manager Server-Side Template Injection Vulnerability Affected: 4.0 through 4.3.1 |
| CVE-2021-22005 RansomwareIn wildKEV | 9.8 | Sep 23 | VMware vCenter Server File Upload Vulnerability Affected: 3.0 before 5.0 |
| CVE-2021-21985 RansomwareIn wildKEV | 9.8 | May 26 | VMware vCenter Server Improper Input Validation Vulnerability Affected: 3.0 before 3.10.2.1; 4.0 before 4.2.1 |
| CVE-2021-21972 RansomwareIn wildKEV | 9.8 | Feb 24 | VMware vCenter Server Remote Code Execution Vulnerability Affected: 3.0 before 3.10.1.2; 4.0 before 4.2 |
| CVE-2020-3992 RansomwareIn wildKEV | 9.8 | Oct 20 | VMware ESXi OpenSLP Use-After-Free Vulnerability Affected: 3.0 before 3.10.1.2; 4.0 before 4.1.0.1 |
| CVE-2020-4006 In wildKEV | 9.1 | Nov 23 | Multiple VMware Products Command Injection Vulnerability Affected: 4.0; 4.0.1 |
Showing 11