CF
Product
Cloud Foundation
On CISA KEVExploited in the wildRansomware-linked
156
CVEs
22
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 24High 71Medium 57Low 4
Watch
Add Cloud Foundation to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-38834 | 4.8 | Nov 26 | Stored cross-site scripting vulnerability (CVE-2024-38834) Affected: 4.0 through 5.2 |
| CVE-2020-3964 | 4.7 | Jun 25 | VMware ESXi (7.0 before ESXi_7.0.0-1.20.16321839, 6.7 before ESXi670-202006401-SG and 6.5 before ESXi650-202005401-SG), Workstation (15.x before 15.5.2), and Fusion (11.x before… Affected: 3.0 before 3.10; 4.0.0 before 4.0.1 |
| CVE-2025-41241 | 4.4 | Jul 29 | Denial-of-service vulnerability Affected: 5.x, 4.5.x |
| CVE-2025-41228 | 4.3 | May 20 | VMware ESXi and vCenter Server Reflected Cross Site Scripting (XSS) Vulnerability Affected: 5.x, 4.5.x |
| CVE-2024-38815 | 4.3 | Oct 9 | VMware NSX contains a content spoofing vulnerability. An unauthenticated malicious actor may be able to craft a URL and redirect a victim to an attacker controlled domain… Affected: 5.0 before Async_Patch_to_4.2.1 |
| CVE-2022-22959 | 4.3 | Apr 13 | VMware Workspace ONE Access, Identity Manager and vRealize Automation contain a cross site request forgery vulnerability Affected: 3.0 before 5.0 |
| CVE-2021-22035 | 4.3 | Oct 13 | VMware vRealize Log Insight (8.x prior to 8.6) contains a CSV(Comma Separated Value) injection vulnerability in interactive analytics export function Affected: 4.0.0 through 4.3.1 |