CF
Product
Cloud Foundation
On CISA KEVExploited in the wildRansomware-linked
158
CVEs
22
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 25High 71Medium 58Low 4
Watch
Add Cloud Foundation to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-41241 | 4.4 | Jul 29 | Denial-of-service vulnerability Affected: 5.x, 4.5.x |
| CVE-2025-41228 | 4.3 | May 20 | VMware ESXi and vCenter Server Reflected Cross Site Scripting (XSS) Vulnerability Affected: 5.x, 4.5.x |
| CVE-2024-38815 | 4.3 | Oct 9 | VMware NSX contains a content spoofing vulnerability. An unauthenticated malicious actor may be able to craft a URL and redirect a victim to an attacker controlled domain… Affected: 5.0 before Async_Patch_to_4.2.1 |
| CVE-2022-22959 | 4.3 | Apr 13 | VMware Workspace ONE Access, Identity Manager and vRealize Automation contain a cross site request forgery vulnerability Affected: 3.0 before 5.0 |
| CVE-2021-22035 | 4.3 | Oct 13 | VMware vRealize Log Insight (8.x prior to 8.6) contains a CSV(Comma Separated Value) injection vulnerability in interactive analytics export function Affected: 4.0.0 through 4.3.1 |
| CVE-2020-3970 | 3.8 | Jun 25 | VMware ESXi (7.0 before ESXi_7.0.0-1.20.16321839, 6.7 before ESXi670-202004101-SG and 6.5 before ESXi650-202005401-SG), Workstation (15.x before 15.5.5), and Fusion (11.x before… Affected: 3.0 before 3.10; 4.0.0 before 4.0.1 |
| CVE-2022-31699 | 3.3 | Dec 13 | VMware ESXi contains a heap-overflow vulnerability Affected: 3.0; 3.0.1; 3.0.1.1; 3.5; 3.5.1; 3.7; +24 more |
| CVE-2021-22033 | 2.7 | Oct 13 | Releases prior to VMware vRealize Operations 8.6 contain a Server Side Request Forgery (SSRF) vulnerability Affected: 3.0.0 through 4.3.1 |