VMWare Security Advisories, Certifications & Guides

ronjor · Jun 25, 2024

VMSA-2024-0013 25 Jun 2024

Advisory ID: VMSA-2024-0013
Advisory Severity: Moderate
CVSSv3 Range: 5.3-6.8
Click to expand...

Synopsis: VMware ESXi and vCenter Server updates address multiple vulnerabilities (CVE-2024-37085, CVE-2024-37086, CVE-2024-37087)
Issue date: 2024-06-25
Updated on: 2024-06-25 (Initial Advisory)
CVE(s) CVE-2024-37085, CVE-2024-37086, CVE-2024-37087)
Click to expand...

ronjor · Jun 27, 2024

VMSA-2024-0014 27 Jun 2024

Advisory ID: VMSA-2024-0014
Advisory Severity: Moderate
CVSSv3 Range: 4.9
Click to expand...

Synopsis: VMware Cloud Director addresses an Improper Privilege Management vulnerability (CVE-2024-22272)
Issue Date: 2024-06-27
Updated on: 2024-06-27
CVE(s): CVE-2024-22272
Click to expand...

ronjor · Jun 27, 2024

VMSA-2024-0015 27 Jun 2024

Advisory ID: VMSA-2024-0015
Advisory Severity: Moderate
CVSSv3 Range: 5.3
Click to expand...

Synopsis: VMware Cloud Director Object Storage Extension addresses an Insertion of Sensitive Information vulnerability (CVE-2024-22276)
Issue Date: 2024-06-27
Updated On: 2024-06-27 (Initial Advisory)
CVE(s) CVE-2024-22276
Click to expand...

ronjor · Jul 4, 2024

VMSA-2024-0016: VMware Cloud Director Availability addresses an HTML injection vulnerability 04 Jul 2024

Advisory ID: VMSA-2024-0016
Severity:Moderate
CVSSv3 Range:6.4
Issue date:2024-07-04
Updated on:2024-07-04 (Initial Advisory)
CVE(s)CVE-2024-22277
Synopsis:VMware Cloud Director Availability addresses an HTML injection vulnerability (CVE-2024-22277)
Click to expand...

JRViejo · Jul 12, 2024

VMSA-2024-0017: VMware Aria Automation updates address SQL-injection vulnerability (CVE-2024-22280)

Advisory ID: VMSA-2024-0017
Advisory Severity: Important
CVSSv3 Range: 8.5
Synopsis: VMware Aria Automation updates address SQL-injection vulnerability (CVE-2024-22280)
Issue date: 2024-07-10
Updated on: 2024-07-10
CVE(s) CVE-2024-22280
Click to expand...

ronjor · Jul 25, 2024

24505

Last Updated
25 July 2024

Initial Publication Date
25 June 2024

https://support.broadcom.com/web/ec...-/external/content/SecurityAdvisories/0/24505

Status
CLOSED

Severity
MEDIUM

CVSS Base Score
5.3-6.8

WorkAround

Affected CVE
CVE-2024-37085, CVE-2024-37086, CVE-2024-37087

ronjor · Aug 12, 2024

VMSA-2024-0013.2 12 Aug 2024

Advisory ID: VMSA-2024-0013.2
Advisory Severity: Moderate
CVSSv3 Range: 5.3-6.8
Synopsis: VMware ESXi and vCenter Server updates address multiple vulnerabilities (CVE-2024-37085, CVE-2024-37086, CVE-2024-37087)
Issue date: 2024-06-25
Updated on: 2024-08-12
CVE(s) CVE-2024-37085, CVE-2024-37086, CVE-2024-37087)
Click to expand...

JRViejo · Aug 29, 2024

ronjor said: ↑

VMSA-2024-0012 18 Jun 2024
Click to expand...

CVE-2024-37079: VMware vCenter Server Integer Underflow Code Execution Vulnerability - Trend Micro Research Team

ronjor · Sep 3, 2024

VMSA-2024-0018:VMware Fusion update addresses a code execution vulnerability (CVE-2024-38811) 03 Sep 2024

Advisory ID: VMSA-2024-0018
Advisory Severity: Important
CVSSv3 Range: 8.8
Click to expand...

Synopsis: VMware Fusion update addresses a code-execution vulnerability (CVE-2024-38811)
Issue date: 2024-09-03
Updated on: 2024-09-03 (Initial Advisory)
CVE(s) CVE-2024-38811
Click to expand...

ronjor · Sep 17, 2024

VMSA-2024-0019 17 Sep 2024

Advisory ID: VMSA-2024-0019
Severity: Critical
CVSSv3 Range: 7.5-9.8
Synopsis: VMware vCenter Server updates address heap-overflow and privilege escalation vulnerabilities
Click to expand...

(CVE-2024-38812, CVE-2024-38813)
Issue date: 2024-09-17
Updated on: 2024-09-17 (Initial Advisory)
CVE(s) CVE-2024-38812, CVE-2024-38813
Click to expand...

ronjor · Sep 20, 2024

VMSA-2024-0019.1 20 Sep 2024

Advisory ID: VMSA-2024-0019.1
Severity: Critical
CVSSv3 Range: 7.5-9.8
Click to expand...

Synopsis: VMware vCenter Server updates address heap-overflow and privilege escalation vulnerabilities (CVE-2024-38812, CVE-2024-38813)
Issue date: 2024-09-17
Updated on: 2024-09-20
CVE(s) CVE-2024-38812, CVE-2024-38813
Click to expand...

ronjor · Oct 9, 2024

VMSA-2024-0020 2024-10-09

Advisory ID: VMSA-2024-0020
Advisory Severity: Moderate
CVSSv3 Range: 4.3-6.7
Click to expand...

Synopsis: VMware NSX updates address multiple vulnerabilities (CVE-2024-38818, CVE-2024-38817, CVE-2024-38815)
Issue date: 2024-10-09
Updated on: 2024-10-09 (Initial Advisory)
CVE(s) CVE-2024-38818, CVE-2024-38817, CVE-2024-38815
Click to expand...

ronjor · Oct 16, 2024

VMSA-2024-0021 16 Oct 2024

Advisory ID: VMSA-2024-0021
Severity: Important
CVSSv3 Range: 8.8
Click to expand...

Synopsis: VMware HCX addresses an authenticated SQL injection vulnerability (CVE-2024-38814)

Issue Date: 2024-10-16
Updated On: 2024-10-16 (Initial Advisory)
CVE(s): CVE-2024-38814
Click to expand...

ronjor · Oct 21, 2024

VMSA-2024-0019.2 21 Oct 2024

Advisory ID: VMSA-2024-0019.2
Severity: Critical
CVSSv3 Range: 7.5-9.8
Click to expand...

Synopsis: VMware vCenter Server updates address heap-overflow and privilege escalation vulnerabilities (CVE-2024-38812, CVE-2024-38813)
Issue date: 2024-09-17
Updated on: 2024-10-21
CVE(s) CVE-2024-38812, CVE-2024-38813
Click to expand...

ronjor · Nov 18, 2024

VMSA-2024-0019.3 18 Nov 2024

Last Updated 18 November 2024
Click to expand...

Advisory ID: VMSA-2024-0019.3
Severity: Critical
CVSSv3 Range: 7.5-9.8
Click to expand...

Synopsis: VMware vCenter Server updates address heap-overflow and privilege escalation vulnerabilities (CVE-2024-38812, CVE-2024-38813)
Issue date: 2024-09-17
Updated on: 2024-10-21
CVE(s) CVE-2024-38812, CVE-2024-38813
Click to expand...

ronjor · Nov 26, 2024

VMSA-2024-0022 26 Nov 2024

Advisory ID: VMSA-2024-0022
Advisory Severity: Important
CVSSv3 Range: 6.5-7.8
Click to expand...

Synopsis: VMware Aria Operations updates address multiple vulnerabilities(CVE-2024-38830, CVE-2024-38831, CVE-2024-38832, CVE-2024-38833 and CVE-2024-38834)
Issue date: 26 Nov 2024
Updated on: 26 Nov 2024
CVE(s) CVE-2024-38830, CVE-2024-38831, CVE-2024-38832, CVE-2024-38833 and CVE-2024-38834
Click to expand...

ronjor · Jan 8, 2025

VMSA-2025-0001 07 Jan 2025

Advisory ID: VMSA-2025-0001
Advisory Severity: Moderate
CVSSv3 Range: 4.3
Click to expand...

Synopsis: VMware Aria Automation update addresses a server side request forgery vulnerability (CVE-2025-22215)
Issue date: 2025-01-07
Updated on: 2025-01-07
CVE(s) CVE-2025-22215
Click to expand...

ronjor · Jan 28, 2025

VMSA-2025-0002

Advisory ID: VMSA-2024-0002
Severity:Important
CVSSv3 Range:8.6
Click to expand...

Synopsis:VMware Avi Load Balancer addresses an unauthenticated blind SQL Injection vulnerability (CVE-2025-22217)
Issue date:2025-01-28
Updated on:2025-01-28 (Initial Advisory)
CVE(s)CVE-2025-22217
Click to expand...

ronjor · Jan 30, 2025

VMSA-2025-0003 30 Jan 2025

Advisory ID: VMSA-2025-0003
Advisory Severity: Important
CVSSv3 Range: 5.2-8.5
Click to expand...

Synopsis: VMware Aria Operations for Logs and VMware Aria Operations updates address multiple vulnerabilities (CVE-2025-22218, CVE-2025-22219, CVE-2025-22220, CVE-2025-22221, CVE-2025-22222)
Click to expand...

Issue date: 2025-01-30
Updated on: 2025-01-30
CVE(s) CVE-2025-22218, CVE-2025-22219, CVE-2025-22220, CVE-2025-22221, CVE-2025-22222
Click to expand...

ronjor · Mar 4, 2025

VMSA-2025-0004 04 Mar 2024

Advisory ID: VMSA-2025-0004
Severity: Critical
CVSSv3 Range: 7.1-9.3
Synopsis: VMware ESXi, Workstation, and Fusion updates address multiple vulnerabilities (CVE-2025-22224, CVE-2025-22225, CVE-2025-22226)
Click to expand...

Issue date: 2025-03-04
Updated on: 2025-03-04 (Initial Advisory)
CVE(s) CVE-2025-22224, CVE-2025-22225, CVE-2025-22226
Click to expand...

ronjor · Mar 25, 2025

VMSA-2025-0005 25 Mar 2025

Advisory ID: VMSA-2025-0005
Advisory Severity: Important
CVSSv3 Range: 7.8
Click to expand...

Synopsis: VMware Tools for Windows update addresses an authentication bypass vulnerability (CVE-2025-22230)
Issue date: 2025-03-25
Updated on: 2025-03-25 (Initial Advisory)
CVE(s) CVE-2025-22230
Click to expand...

ronjor · Apr 1, 2025 at 8:33 AM

VMSA-2025-0006 01 Apr 2025

Advisory ID:VMSA-2025-0006
Advisory Severity:Important
CVSSv3 Range: 7.8
Click to expand...

Synopsis: VMware Aria Operations updates address a local privilege escalation vulnerability (CVE-2025-22231)
Issue date: 2025-04-01
Updated on: 2025-04-01
CVE(s) CVE-2025-22231
Click to expand...

Log in or Sign up

VMWare Security Advisories, Certifications & Guides

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

JRViejo Super Moderator

ronjor Global Moderator

ronjor Global Moderator

JRViejo Super Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

Log in or Sign up

VMWare Security Advisories, Certifications & Guides

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

JRViejo Super Moderator

ronjor Global Moderator

ronjor Global Moderator

JRViejo Super Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

Useful Searches