CF
Product
Cloud Foundation
On CISA KEVExploited in the wildRansomware-linked
141
CVEs
21
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 21High 66Medium 50Low 4
Watch
Add Cloud Foundation to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2021-22045 | 7.8 | Jan 4 | VMware ESXi (7.0, 6.7 before ESXi670-202111101-SG and 6.5 before ESXi650-202110101-SG), VMware Workstation (16.2.0) and VMware Fusion (12.2.0) contains a heap-overflow… Affected: 3.0 through 3.10.2.2; 4.0 through 4.3.1 |
| CVE-2021-22015 | 7.8 | Sep 23 | The vCenter Server contains multiple local privilege escalation vulnerabilities due to improper permissions of files and directories Affected: 3.0 before 5.0 |
| CVE-2021-21991 | 7.8 | Sep 22 | The vCenter Server contains a local privilege escalation vulnerability due to the way it handles session tokens Affected: 3.0 before 3.10.2.2; 4.0 before 4.3 |
| CVE-2020-4005 | 7.8 | Nov 20 | VMware ESXi (7.0 before ESXi70U1b-17168206, 6.7 before ESXi670-202011101-SG, 6.5 before ESXi650-202011301-SG) contains a privilege-escalation vulnerability that exists in the way… Affected: 3.0 before 3.10.1.2; 4.0 before 4.1.0.1 |
| CVE-2020-3969 | 7.8 | Jun 24 | VMware ESXi (7.0 before ESXi_7.0.0-1.20.16321839, 6.7 before ESXi670-202004101-SG and 6.5 before ESXi650-202005401-SG), Workstation (15.x before 15.5.5), and Fusion (11.x before… Affected: 3.0 before 3.10; 4.0.0 before 4.0.1 |
| CVE-2025-22218 | 7.7 | Jan 30 | VMware Aria Operations for Logs contains an information disclosure vulnerability. A malicious actor with View Only Admin permissions may be able to read the credentials of a… Affected: 4.0 through 5.2 |
| CVE-2020-3982 | 7.7 | Oct 20 | VMware ESXi (7.0 before ESXi_7.0.1-0.0.16850804, 6.7 before ESXi670-202008101-SG, 6.5 before ESXi650-202007101-SG), Workstation (15.x), Fusion (11.x before 11.5.6) contain an… Affected: 3.0 before 3.10.1; 4.0 before 4.1 |
| CVE-2026-41703 | 7.6 | Jul 30 | Out-of-bounds read vulnerability Affected: 9.1.x.x; 9.0.x.x; 5.x before 5.2.3 |
| CVE-2025-22243 | 7.5 | Jun 4 | VMware NSX Manager UI is vulnerable to a stored Cross-Site Scripting (XSS) attack due to improper input validation Affected: 4.5 through 5.2.1.2 |
| CVE-2022-22982 | 7.5 | Jul 13 | The vCenter Server contains a server-side request forgery (SSRF) vulnerability Affected: 3.0 through 3.11; 4.0 through 4.3.1 |
| CVE-2021-22050 | 7.5 | Feb 16 | ESXi contains a slow HTTP POST denial-of-service vulnerability in rhttpproxy Affected: 3.0 before 3.11; 4.0 before 4.4 |
| CVE-2021-21980 | 7.5 | Nov 24 | The vSphere Web Client (FLEX/Flash) contains an unauthorized arbitrary file read vulnerability Affected: 3.0 |
| CVE-2021-22019 | 7.5 | Sep 23 | The vCenter Server contains a denial-of-service vulnerability in VAPI (vCenter API) service Affected: 3.0 before 3.10.2.2; 4.0 before 4.3 |
| CVE-2021-22013 | 7.5 | Sep 23 | The vCenter Server contains a file path traversal vulnerability leading to information disclosure in the appliance management API Affected: 3.0 before 5.0 |
| CVE-2021-22012 | 7.5 | Sep 23 | The vCenter Server contains an information disclosure vulnerability due to an unauthenticated appliance management API Affected: 3.0 before 5.0 |
| CVE-2021-22010 | 7.5 | Sep 23 | The vCenter Server contains a denial-of-service vulnerability in VPXD service Affected: 3.0 before 5.0 |
| CVE-2021-22009 | 7.5 | Sep 23 | The vCenter Server contains multiple denial-of-service vulnerabilities in VAPI (vCenter API) service Affected: 3.0 before 5.0 |
| CVE-2021-22008 | 7.5 | Sep 23 | The vCenter Server contains an information disclosure vulnerability in VAPI (vCenter API) service Affected: 3.0 before 5.0 |
| CVE-2021-22006 | 7.5 | Sep 23 | The vCenter Server contains a reverse proxy bypass vulnerability due to the way the endpoints handle the URI Affected: 3.0 before 5.0 |
| CVE-2021-22003 | 7.5 | Aug 31 | VMware Workspace ONE Access and Identity Manager, unintentionally provide a login interface on port 7443 Affected: 4.0; 4.0.1; 4.1; 4.1.0.1; 4.2.1 |
| CVE-2021-22027 | 7.5 | Aug 30 | The vRealize Operations Manager API (8.x prior to 8.5) contains a Server Side Request Forgery in an end point Affected: 3.0 through 3.10.2.1; 4.0 through 4.2.1 |
| CVE-2021-22026 | 7.5 | Aug 30 | The vRealize Operations Manager API (8.x prior to 8.5) contains a Server Side Request Forgery in an end point Affected: 3.0 through 3.10.2.1; 4.0 through 4.2.1 |
| CVE-2021-22025 | 7.5 | Aug 30 | The vRealize Operations Manager API (8.x prior to 8.5) contains a broken access control vulnerability leading to unauthenticated API access Affected: 3.0 through 3.10.2.1; 4.0 through 4.2.1 |
| CVE-2021-22024 | 7.5 | Aug 30 | The vRealize Operations Manager API (8.x prior to 8.5) contains an arbitrary log-file read vulnerability Affected: 3.0 through 3.10.2.1; 4.0 through 4.2.1 |
| CVE-2021-21995 | 7.5 | Jul 13 | OpenSLP as used in ESXi has a denial-of-service vulnerability due a heap out-of-bounds read issue Affected: 3.0 before 3.10.2 |
| CVE-2020-3967 | 7.5 | Jun 25 | VMware ESXi (7.0 before ESXi_7.0.0-1.20.16321839, 6.7 before ESXi670-202004101-SG and 6.5 before ESXi650-202005401-SG), Workstation (15.x before 15.5.5), and Fusion (11.x before… Affected: 3.0 before 3.10; 4.0.0 before 4.0.1 |
| CVE-2020-3966 | 7.5 | Jun 25 | VMware ESXi (7.0 before ESXi_7.0.0-1.20.16321839, 6.7 before ESXi670-202004101-SG and 6.5 before ESXi650-202005401-SG), Workstation (15.x before 15.5.2), and Fusion (11.x before… Affected: 3.0 before 3.10; 4.0.0 before 4.0.1 |
| CVE-2019-16919 | 7.5 | Oct 18 | Harbor API has a Broken Access Control vulnerability Affected: All versions, or not specified |
| CVE-2020-3994 | 7.4 | Oct 20 | VMware vCenter Server (6.7 before 6.7u3, 6.6 before 6.5u3k) contains a session hijack vulnerability in the vCenter Server Appliance Management Interface update function due to a… Affected: 3.0 before 3.9 |
| CVE-2025-41231 | 7.3 | May 20 | VMware Cloud Foundation contains a missing authorisation vulnerability. A malicious actor with access to VMware Cloud Foundation appliance may be able to perform certain… Affected: 4.5 before 4.5.2; 5.0 before 5.2.1.2 |
| CVE-2026-22721 | 7.2 | Feb 25 | VMware Aria Operations contains a privilege escalation vulnerability Affected: 4.0 before 5.2.3; 9.0 before 9.0.2.0 |
| CVE-2024-22274 | 7.2 | May 21 | The vCenter Server contains an authenticated remote code execution vulnerability. A malicious actor with administrative privileges on the vCenter appliance shell may exploit this… Affected: 4.0 before 5.1.1 |
| CVE-2023-20878 | 7.2 | May 12 | VMware Aria Operations contains a deserialization vulnerability Affected: 4.0 through 4.5 |
| CVE-2023-20865 | 7.2 | Apr 20 | VMware Aria Operations for Logs contains a command injection vulnerability Affected: 4.0 through 4.5 |
| CVE-2022-31700 | 7.2 | Dec 14 | VMware Workspace ONE Access and Identity Manager contain an authenticated remote code execution vulnerability Affected: All versions, or not specified |
| CVE-2022-22958 | 7.2 | Apr 13 | VMware Workspace ONE Access, Identity Manager and vRealize Automation contain two remote code execution vulnerabilities (CVE-2022-22957 & CVE-2022-22958) Affected: 3.0 before 5.0 |
| CVE-2022-22957 | 7.2 | Apr 13 | VMware Workspace ONE Access, Identity Manager and vRealize Automation contain two remote code execution vulnerabilities (CVE-2022-22957 & CVE-2022-22958) Affected: 3.0 before 5.0 |
| CVE-2021-22014 | 7.2 | Sep 23 | The vCenter Server contains an authenticated code execution vulnerability in VAMI (Virtual Appliance Management Infrastructure) Affected: 3.0 before 5.0 |
| CVE-2021-22023 | 7.2 | Aug 30 | The vRealize Operations Manager API (8.x prior to 8.5) has insecure object reference vulnerability Affected: 3.0 through 3.10.2.1; 4.0 through 4.2.1 |
| CVE-2024-22255 | 7.1 | Mar 5 | VMware ESXi, Workstation, and Fusion contain an information disclosure vulnerability in the UHCI USB controller. A malicious actor with administrative access to a virtual machine… Affected: 4.0 through 5.0 |
| CVE-2025-22244 | 6.9 | Jun 4 | VMware NSX contains a stored Cross-Site Scripting (XSS) vulnerability in the gateway firewall due to improper input validation Affected: 4.5 through 5.2.1.2 |
| CVE-2024-37086 | 6.8 | Jun 25 | VMware ESXi contains an out-of-bounds read vulnerability. A malicious actor with local administrative privileges on a virtual machine with an existing snapshot may trigger an… Affected: 4.0 before 5.2 |
| CVE-2024-22253 | 6.7 | Mar 5 | VMware ESXi, Workstation, and Fusion contain a use-after-free vulnerability in the UHCI USB controller. A malicious actor with local administrative privileges on a virtual machine… Affected: 4.0 through 5.0 |
| CVE-2024-22235 | 6.7 | Feb 21 | VMware Aria Operations contains a local privilege escalation vulnerability. A malicious actor with administrative access to the local system can escalate privileges to 'root' Affected: 4.0 through 5.2 |
| CVE-2023-34043 | 6.7 | Sep 27 | VMware Aria Operations contains a local privilege escalation vulnerability. A malicious actor with administrative access to the local system can escalate privileges to 'root' Affected: 4.0 before 4.4; 5.0 |
| CVE-2023-20880 | 6.7 | May 12 | VMware Aria Operations contains a privilege escalation vulnerability Affected: 4.0 through 4.5 |
| CVE-2023-20879 | 6.7 | May 12 | VMware Aria Operations contains a Local privilege escalation vulnerability Affected: 4.0 through 4.5 |
| CVE-2021-22041 | 6.7 | Feb 16 | VMware ESXi, Workstation, and Fusion contain a double-fetch vulnerability in the UHCI USB controller Affected: 3.0 before 3.11; 4.0 before 4.4 |
| CVE-2021-22040 | 6.7 | Feb 16 | VMware ESXi, Workstation, and Fusion contain a use-after-free vulnerability in the XHCI USB controller Affected: 3.0 before 3.11; 4.0 before 4.4 |
| CVE-2025-22222 | 6.5 | Jan 30 | VMware Aria Operations contains an information disclosure vulnerability. A malicious user with non-administrative privileges may exploit this vulnerability to retrieve credentials… Affected: 4.0 through 5.2 |