agentprime: vmware-vcenter-serverEvery new CVE for vmware-vcenter-server.https://agentprime.io/CVE-2025-41228: VMware ESXi and vCenter Server Reflected Cross Site Scripting (XSS) Vulnerabilityhttps://agentprime.io/advisories/CVE-2025-41228/https://agentprime.io/advisories/CVE-2025-41228/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 20 May 2025 14:24:34 GMTCVECVE-2025-41225: VMware vCenter Server authenticated command-execution vulnerabilityhttps://agentprime.io/advisories/CVE-2025-41225/https://agentprime.io/advisories/CVE-2025-41225/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 20 May 2025 14:24:17 GMTCVECVE-2024-38813: Privilege escalation vulnerabilityhttps://agentprime.io/advisories/CVE-2024-38813/https://agentprime.io/advisories/CVE-2024-38813/CVSS 7.5 (High). Critical: In CISA’s KEV catalogue since 20 Nov 2024: it is known to be exploited. CVSS score 7.5 (7.0 or more) and EPSS 0.17 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.Tue, 17 Sep 2024 17:13:13 GMTCVEcriticalKEVCVE-2024-38812: Heap-overflow vulnerabilityhttps://agentprime.io/advisories/CVE-2024-38812/https://agentprime.io/advisories/CVE-2024-38812/CVSS 9.8 (Critical). Critical: In CISA’s KEV catalogue since 20 Nov 2024: it is known to be exploited. CVSS score 9.8: 9.0 or more. CVSS score 9.8 (7.0 or more) and EPSS 0.55 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.Tue, 17 Sep 2024 17:13:09 GMTCVEcriticalKEVCVE-2024-37081: The vCenter Server contains multiple local privilege escalation vulnerabilities due to misconfiguration of sudo.https://agentprime.io/advisories/CVE-2024-37081/https://agentprime.io/advisories/CVE-2024-37081/CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 18 Jun 2024 05:43:20 GMTCVECVE-2024-37080: Heap-based buffer overflow in VMware vCenter Server and othershttps://agentprime.io/advisories/CVE-2024-37080/https://agentprime.io/advisories/CVE-2024-37080/CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. CVSS score 9.8 (7.0 or more) and EPSS 0.12 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.Tue, 18 Jun 2024 05:43:10 GMTCVEcriticalCVE-2024-37079: Out-of-bounds write in VMware vCenter Server and othershttps://agentprime.io/advisories/CVE-2024-37079/https://agentprime.io/advisories/CVE-2024-37079/CVSS 9.8 (Critical). Critical: In CISA’s KEV catalogue since 23 Jan 2026: it is known to be exploited. CVSS score 9.8: 9.0 or more. CVSS score 9.8 (7.0 or more) and EPSS 0.22 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.Tue, 18 Jun 2024 05:43:06 GMTCVEcriticalKEVCVE-2024-22275: Information disclosure in VMware vCenter Server and othershttps://agentprime.io/advisories/CVE-2024-22275/https://agentprime.io/advisories/CVE-2024-22275/CVSS 4.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 21 May 2024 17:29:45 GMTCVECVE-2024-22274: Code injection in VMware vCenter Server and othershttps://agentprime.io/advisories/CVE-2024-22274/https://agentprime.io/advisories/CVE-2024-22274/CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 21 May 2024 17:29:33 GMTCVECVE-2023-34056: VMware vCenter Server Partial Information Disclosure Vulnerabilityhttps://agentprime.io/advisories/CVE-2023-34056/https://agentprime.io/advisories/CVE-2023-34056/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 25 Oct 2023 04:24:47 GMTCVECVE-2023-34048: VMware vCenter Server Out-of-Bounds Write Vulnerabilityhttps://agentprime.io/advisories/CVE-2023-34048/https://agentprime.io/advisories/CVE-2023-34048/CVSS 9.8 (Critical). Critical: In CISA’s KEV catalogue since 22 Jan 2024: it is known to be exploited. CVSS score 9.8: 9.0 or more. CVSS score 9.8 (7.0 or more) and EPSS 0.99 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.Wed, 25 Oct 2023 04:21:42 GMTCVEcriticalKEVCVE-2022-31680: The vCenter Server contains an unsafe deserialisation vulnerability in the PSC (Platform services controller).https://agentprime.io/advisories/CVE-2022-31680/https://agentprime.io/advisories/CVE-2022-31680/Published by the CVE Program. Not analysed by agentprime yet.Fri, 07 Oct 2022 00:00:00 GMTCVECVE-2022-22982: The vCenter Server contains a server-side request forgery (SSRF) vulnerability.https://agentprime.io/advisories/CVE-2022-22982/https://agentprime.io/advisories/CVE-2022-22982/Published by the CVE Program. Not analysed by agentprime yet.Wed, 13 Jul 2022 18:18:58 GMTCVECVE-2021-22013: The vCenter Server contains a file path traversal vulnerability leading to information disclosure in the appliance management API.https://agentprime.io/advisories/CVE-2021-22013/https://agentprime.io/advisories/CVE-2021-22013/Published by the CVE Program. Not analysed by agentprime yet.Thu, 23 Sep 2021 11:58:53 GMTCVECVE-2021-22012: The vCenter Server contains an information disclosure vulnerability due to an unauthenticated appliance management API.https://agentprime.io/advisories/CVE-2021-22012/https://agentprime.io/advisories/CVE-2021-22012/Published by the CVE Program. Not analysed by agentprime yet.Thu, 23 Sep 2021 11:58:46 GMTCVECVE-2021-21972: Path traversal in VMware vCenter Server and othershttps://agentprime.io/advisories/CVE-2021-21972/https://agentprime.io/advisories/CVE-2021-21972/CVSS 9.8 (Critical). Critical: In CISA’s KEV catalogue since 3 Nov 2021: it is known to be exploited. CVSS score 9.8: 9.0 or more. CVSS score 9.8 (7.0 or more) and EPSS 1.00 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.Wed, 24 Feb 2021 16:42:05 GMTCVEcriticalKEVCVE-2021-21973: Server-side request forgery in VMware vCenter Server and othershttps://agentprime.io/advisories/CVE-2021-21973/https://agentprime.io/advisories/CVE-2021-21973/CVSS 5.3 (Medium). Critical: In CISA’s KEV catalogue since 7 Mar 2022: it is known to be exploited. Published by the CVE Program. Not analysed by agentprime yet.Wed, 24 Feb 2021 16:42:02 GMTCVEcriticalKEVCVE-2020-3952: Missing authentication in VMware vCenter Serverhttps://agentprime.io/advisories/CVE-2020-3952/https://agentprime.io/advisories/CVE-2020-3952/CVSS 9.8 (Critical). Critical: In CISA’s KEV catalogue since 3 Nov 2021: it is known to be exploited. CVSS score 9.8: 9.0 or more. CVSS score 9.8 (7.0 or more) and EPSS 0.90 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.Fri, 10 Apr 2020 13:55:36 GMTCVEcriticalKEVCVE-2019-5531: VMware vSphere ESXi: VMware vSphere ESXi (6.7 prior to ESXi670-201810101-SG…https://agentprime.io/advisories/CVE-2019-5531/https://agentprime.io/advisories/CVE-2019-5531/Published by the CVE Program. Not analysed by agentprime yet.Wed, 18 Sep 2019 21:42:17 GMTCVECVE-2019-5532: VMware vCenter Server: VMware vCenter Server (6.7.x prior to 6.7 U3…https://agentprime.io/advisories/CVE-2019-5532/https://agentprime.io/advisories/CVE-2019-5532/Published by the CVE Program. Not analysed by agentprime yet.Wed, 18 Sep 2019 20:32:36 GMTCVECVE-2019-5534: VMware vCenter Server: VMware vCenter Server (6.7.x prior to 6.7 U3…https://agentprime.io/advisories/CVE-2019-5534/https://agentprime.io/advisories/CVE-2019-5534/Published by the CVE Program. Not analysed by agentprime yet.Wed, 18 Sep 2019 20:32:33 GMTCVECVE-2017-4927: VMware vCenter Server: VMware vCenter Server (6.5 prior to 6.5 U1 and 6.0 prior to 6.0 U3c) does not correctly…https://agentprime.io/advisories/CVE-2017-4927/https://agentprime.io/advisories/CVE-2017-4927/Published by the CVE Program. Not analysed by agentprime yet.Fri, 17 Nov 2017 14:00:00 GMTCVECVE-2017-4926: VMware vCenter Server: VMware vCenter Server (6.5 prior to 6.5 U1) contains a vulnerability that may allow for…https://agentprime.io/advisories/CVE-2017-4926/https://agentprime.io/advisories/CVE-2017-4926/Published by the CVE Program. Not analysed by agentprime yet.Fri, 15 Sep 2017 13:00:00 GMTCVECVE-2017-4919: VMware vCenter Server: VMware vCenter Server 5.5, 6.0, 6.5 allows vSphere users with certain…https://agentprime.io/advisories/CVE-2017-4919/https://agentprime.io/advisories/CVE-2017-4919/Published by the CVE Program. Not analysed by agentprime yet.Fri, 28 Jul 2017 22:00:00 GMTCVE