Advisories · Technology

VMware Cloud Foundation (vCenter Server).

Every CVE that names VMware Cloud Foundation (vCenter Server) among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2024-22275 CVE record

CVSS 4.9 Medium

Information disclosure in VMware vCenter Server and others
- VMware vCenter Server
- VMware Cloud Foundation (vCenter Server)
- Information disclosure
Not analysed yet 21 May 2024
CVE-2024-22274 CVE record

CVSS 7.2 High

Code injection in VMware vCenter Server and others
- VMware vCenter Server
- VMware Cloud Foundation (vCenter Server)
- Code injection
Not analysed yet 21 May 2024
CVE-2023-20896 CVE record

CVSS 5.9 Medium

The VMware vCenter Server contains an out-of-bounds read vulnerability in the implementation of the DCERPC protocol.
- VMware vCenter Server (vCenter Server)
- VMware Cloud Foundation (vCenter Server)
Not analysed yet 22 Jun 2023
CVE-2023-20895 CVE record

CVSS 8.1 High

The VMware vCenter Server contains a memory corruption vulnerability in the implementation of the DCERPC protocol.
- VMware vCenter Server (vCenter Server)
- VMware Cloud Foundation (vCenter Server)
Not analysed yet 22 Jun 2023
CVE-2023-20894 CVE record

CVSS 8.1 HighCritical · CVSS 7+ and EPSS

The VMware vCenter Server contains an out-of-bounds write vulnerability in the implementation of the DCERPC protocol.
- VMware vCenter Server (vCenter Server)
- VMware Cloud Foundation (vCenter Server)
Not analysed yet 22 Jun 2023
CVE-2023-20893 CVE record

CVSS 8.1 High

The VMware vCenter Server contains a use-after-free vulnerability in the implementation of the DCERPC protocol.
- VMware vCenter Server (vCenter Server)
- VMware Cloud Foundation (vCenter Server)
Not analysed yet 22 Jun 2023
CVE-2023-20892 CVE record

CVSS 8.1 High

VMware vCenter Server heap-overflow vulnerability
- VMware vCenter Server (vCenter Server)
- VMware Cloud Foundation (vCenter Server)
Not analysed yet 22 Jun 2023