Overview 39 matches · 4 in Waratek scope · 2 protected · 4 exploited · 3 CISA KEV · 5 public PoC · 4 EPSS ≥ 0.5
39matches
4in Waratek scope10.3%
2protected5.1%
4exploited10.3%
3CISA KEV7.7%
5public PoC12.8%
4EPSS ≥ 0.510.3%
Protected by Waratek
2
5.1%
Rule in development
0
0.0%
Mitigation candidate
0
0.0%
No exploit published
2
5.1%
Outside Waratek scope
0
0.0%
Not applicable
35
89.7%
Withdrawn CVE
0
0.0%
blocked by ARMR today
2
5.1%
partly blocked
0
0.0%
not blocked
37
94.9%
not established
0
0.0%
unrecorded
0
0.0%
Exploited
4
10.3%
Working exploit published
1
2.6%
Proof of concept only
0
0.0%
Forecast only
1
2.6%
No public exploit
33
84.6%
split by
peak 12 / year
20092
Not applicable2
Medium2
not blocked2
No public exploit2
20100
20110
20122
Not applicable2
Medium2
not blocked2
No public exploit2
20132
Not applicable2
Medium2
not blocked2
No public exploit2
20144
No exploit published1
Not applicable3
Medium4
not blocked4
No public exploit4
20152
Not applicable2
Medium2
not blocked2
No public exploit2
20163
Not applicable3
Medium3
not blocked3
No public exploit3
20172
Not applicable2
Medium2
not blocked2
No public exploit2
20180
20193
Not applicable3
Medium3
not blocked3
No public exploit3
20201
Not applicable1
Medium1
not blocked1
No public exploit1
202112
Protected by Waratek2
No exploit published1
Not applicable9
Medium12
blocked by ARMR today2
not blocked10
Exploited3
Working exploit published1
Forecast only1
No public exploit7
20223
Not applicable3
Medium3
not blocked3
Exploited1
No public exploit2
20231
Not applicable1
Medium1
not blocked1
No public exploit1
20242
Not applicable2
Medium2
not blocked2
No public exploit2
20102012201420162018202020222024
| CVE | Severity | Published▾ | Status | Exploitation | Description |
|---|---|---|---|---|---|
| CVE-2024-37087 | Medium | 2024-06-25 | Not applicable | No public exploit | The vCenter Server contains a denial-of-service vulnerability. A malicious actor with network access to vCenter Server may create a denial-of-service condition. |
| CVE-2024-22275 | Medium | 2024-05-21 | Not applicable | No public exploit | The vCenter Server contains a partial file read vulnerability. A malicious actor with administrative privileges on the vCenter appliance shell may exploit this issue to partially read arbitrary files containing sensitive data. |
| CVE-2023-34056 | Medium | 2023-10-25 | Not applicable | No public exploit | vCenter Server contains a partial information disclosure vulnerability. A malicious actor with non-administrative privileges to vCenter Server may leverage this issue to access unauthorized data. |
| CVE-2022-31698 | Medium | 2022-12-13 | Not applicable | No public exploit | The vCenter Server contains a denial-of-service vulnerability in the content library service. A malicious actor with network access to port 443 on vCenter Server may exploit this issue to trigger a denial-of-service condition by sending a specially crafted header. |
| CVE-2022-31697 | Medium | 2022-12-13 | Not applicable | No public exploit | The vCenter Server contains an information disclosure vulnerability due to the logging of credentials in plaintext. A malicious actor with access to a workstation that invoked a vCenter Server Appliance ISO operation (Install/Upgrade/Migrate/Restore) can access plaintext passwords used during that operation. |
| CVE-2022-22948 | Medium | 2022-03-29 | Not applicable | Exploited | The vCenter Server contains an information disclosure vulnerability due to improper permission of files. A malicious actor with non-administrative access to the vCenter Server may exploit this issue to gain access to sensitive information. |
| CVE-2021-22020 | Medium | 2021-09-23 | Not applicable | No public exploit | The vCenter Server contains a denial-of-service vulnerability in the Analytics service. Successful exploitation of this issue may allow an attacker to create a denial-of-service condition on vCenter Server. |
| CVE-2021-22018 | Medium | 2021-09-23 | Not applicable | No public exploit | The vCenter Server contains an arbitrary file deletion vulnerability in a VMware vSphere Life-cycle Manager plug-in. A malicious actor with network access to port 9087 on vCenter Server may exploit this issue to delete non critical files. |
| CVE-2021-22017 | Medium | 2021-09-23 | Not applicable | Exploited | Rhttproxy as used in vCenter Server contains a vulnerability due to improper implementation of URI normalization. A malicious actor with network access to port 443 on vCenter Server may exploit this issue to bypass proxy leading to internal endpoints being accessed. |
| CVE-2021-22016 | Medium | 2021-09-23 | Not applicable | No public exploit | The vCenter Server contains a reflected cross-site scripting vulnerability due to a lack of input sanitization. An attacker may exploit this issue to execute malicious scripts by tricking a victim into clicking a malicious link. |
| CVE-2021-22011 | Medium | 2021-09-23 | Not applicable | No public exploit | vCenter Server contains an unauthenticated API endpoint vulnerability in vCenter Server Content Library. A malicious actor with network access to port 443 on vCenter Server may exploit this issue to perform unauthenticated VM network setting manipulation. |
| CVE-2021-22007 | Medium | 2021-09-23 | Not applicable | No public exploit | The vCenter Server contains a local information disclosure vulnerability in the Analytics service. An authenticated user with non-administrative privilege may exploit this issue to gain access to sensitive information. |
| CVE-2021-21993 | Medium | 2021-09-23 | Not applicable | No public exploit | The vCenter Server contains an SSRF (Server Side Request Forgery) vulnerability due to improper validation of URLs in vCenter Server Content Library. An authorised user with access to content library may exploit this issue by sending a POST request to vCenter Server leading to information disclosure. |
| CVE-2021-21992 | Medium | 2021-09-22 | Not applicable | No public exploit | The vCenter Server contains a denial-of-service vulnerability due to improper XML entity parsing. A malicious actor with non-administrative user access to the vCenter Server vSphere Client (HTML5) or vCenter Server vSphere Web Client (FLEX/Flash) may exploit this issue to create a denial-of-service condition on the vCenter Server host. |
| CVE-2021-34429 | Medium | 2021-07-15 | Protected by Waratek | Exploited | For Eclipse Jetty versions 9.4.37-9.4.42, 10.0.1-10.0.5 & 11.0.1-11.0.5, URIs can be crafted using some encoded characters to access the content of the WEB-INF directory and/or bypass some security constraints. This is a variation of the vulnerability reported in CVE-2021-28164/GHSA-v7ff-8wcx-gmc5. |
| CVE-2021-28164 | Medium | 2021-04-01 | Protected by Waratek | Working exploit published | In Eclipse Jetty 9.4.37.v20210219 to 9.4.38.v20210224, the default compliance mode allows requests with URIs that contain %2e or %2e%2e segments to access protected resources within the WEB-INF directory. For example a request to /context/%2e/WEB-INF/web.xml can retrieve the web.xml file. This can reveal sensitive information regarding the implementation of a web application. |
| CVE-2020-27223 | Medium | 2021-02-26 | No exploit published | Forecast only | In Eclipse Jetty 9.4.6.v20170531 to 9.4.36.v20210114 (inclusive), 10.0.0, and 11.0.0 when Jetty handles a request containing multiple Accept headers with a large number of “quality” (i.e. q) parameters, the server may enter a denial of service (DoS) state due to high CPU usage processing those quality values, resulting in minutes of CPU time exhausted processing those quality values. |
| CVE-2021-21973 | Medium | 2021-02-24 | Not applicable | Exploited | The vSphere Client (HTML5) contains an SSRF (Server Side Request Forgery) vulnerability due to improper validation of URLs in a vCenter Server plugin. A malicious actor with network access to port 443 may exploit this issue by sending a POST request to vCenter Server plugin leading to information disclosure. This affects: VMware vCenter Server (7.x before 7.0 U1c, 6.7 before 6.7 U3l and 6.5 before 6.5 U3n) and VMware Cloud Foundation (4.x before 4.2 and 3.x before 3.10.1.2). |
| CVE-2020-3976 | Medium | 2020-08-21 | Not applicable | No public exploit | VMware ESXi and vCenter Server contain a partial denial of service vulnerability in their respective authentication services. VMware has evaluated the severity of this issue to be in the Moderate severity range with a maximum CVSSv3 base score of 5.3. |
| CVE-2019-5538 | Medium | 2019-10-28 | Not applicable | No public exploit | Sensitive information disclosure vulnerability resulting from a lack of certificate validation during the File-Based Backup and Restore operations of VMware vCenter Server Appliance (6.7 before 6.7u3a and 6.5 before 6.5u3d) may allow a malicious actor to intercept sensitive data in transit over SCP. A malicious actor with man-in-the-middle positioning between vCenter Server Appliance and a backup target may be able to intercept sensitive data in transit during File-Based Backup and Restore operations. |
| CVE-2019-5537 | Medium | 2019-10-28 | Not applicable | No public exploit | Sensitive information disclosure vulnerability resulting from a lack of certificate validation during the File-Based Backup and Restore operations of VMware vCenter Server Appliance (6.7 before 6.7u3a and 6.5 before 6.5u3d) may allow a malicious actor to intercept sensitive data in transit over FTPS and HTTPS. A malicious actor with man-in-the-middle positioning between vCenter Server Appliance and a backup target may be able to intercept sensitive data in transit during File-Based Backup and Restore operations. |
| CVE-2019-5531 | Medium | 2019-09-18 | Not applicable | No public exploit | VMware vSphere ESXi (6.7 prior to ESXi670-201810101-SG, 6.5 prior to ESXi650-201811102-SG, and 6.0 prior to ESXi600-201807103-SG) and VMware vCenter Server (6.7 prior to 6.7 U1b, 6.5 prior to 6.5 U2b, and 6.0 prior to 6.0 U3j) contain an information disclosure vulnerability in clients arising from insufficient session expiration. An attacker with physical access or an ability to mimic a websocket connection to a user’s browser may be able to obtain control of a VM Console after the user has logged out or their session has timed out. |
| CVE-2017-4926 | Medium | 2017-09-15 | Not applicable | No public exploit | VMware vCenter Server (6.5 prior to 6.5 U1) contains a vulnerability that may allow for stored cross-site scripting (XSS). An attacker with VC user privileges can inject malicious java-scripts which will get executed when other VC users access the page. |
| CVE-2017-4922 | Medium | 2017-08-01 | Not applicable | No public exploit | VMware vCenter Server (6.5 prior to 6.5 U1) contains an information disclosure issue due to the service startup script using world writable directories as temporary storage for critical information. Successful exploitation of this issue may allow unprivileged host users to access certain critical information when the service gets restarted. |
| CVE-2016-5331 | Medium | 2016-08-08 | Not applicable | No public exploit | CRLF injection vulnerability in VMware vCenter Server 6.0 before U2 and ESXi 6.0 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unspecified vectors. |
| CVE-2015-6931 | Medium | 2016-07-03 | Not applicable | No public exploit | Cross-site scripting (XSS) vulnerability in the vSphere Web Client in VMware vCenter Server 5.0 before U3g, 5.1 before U3d, and 5.5 before U2d allows remote attackers to inject arbitrary web script or HTML via a crafted URL. |
| CVE-2016-2078 | Medium | 2016-06-08 | Not applicable | No public exploit | Cross-site scripting (XSS) vulnerability in the Web Client in VMware vCenter Server 5.1 before update 3d, 5.5 before update 3d, and 6.0 before update 2 on Windows allows remote attackers to inject arbitrary web script or HTML via the flashvars parameter. |
| CVE-2015-1047 | Medium | 2015-10-12 | Not applicable | No public exploit | vpxd in VMware vCenter Server 5.0 before u3e, 5.1 before u3, and 5.5 before u2 allows remote attackers to cause a denial of service via a long heartbeat message. |
| CVE-2015-6932 | Medium | 2015-09-18 | Not applicable | No public exploit | VMware vCenter Server 5.5 before u3 and 6.0 before u1 does not verify X.509 certificates from TLS LDAP servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. |
| CVE-2014-8371 | Medium | 2014-12-08 | Not applicable | No public exploit | VMware vCenter Server Appliance (vCSA) 5.5 before Update 2, 5.1 before Update 3, and 5.0 before Update 3c does not properly validate certificates when connecting to a CIM Server on an ESXi host, which allows man-in-the-middle attackers to spoof CIM servers via a crafted certificate. |
| CVE-2014-3797 | Medium | 2014-12-08 | Not applicable | No public exploit | Cross-site scripting (XSS) vulnerability in VMware vCenter Server Appliance (vCSA) 5.1 before Update 3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. |
| CVE-2014-4258 | Medium | 2014-07-17 | Not applicable | No public exploit | Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.37 and earlier and 5.6.17 and earlier allows remote authenticated users to affect confidentiality, integrity, and availability via vectors related to SRINFOSC. |
| CVE-2014-4241 | Medium | 2014-07-17 | No exploit published | No public exploit | Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.0.2.0 and 10.3.6.0 allows remote attackers to affect integrity via vectors related to WLS - Web Services. |
| CVE-2013-5971 | Medium | 2013-10-21 | Not applicable | No public exploit | Session fixation vulnerability in the vSphere Web Client Server in VMware vCenter Server 5.0 before Update 3 allows remote attackers to hijack web sessions and gain privileges via unspecified vectors. |
| CVE-2013-3107 | Medium | 2013-05-01 | Not applicable | No public exploit | VMware vCenter Server 5.1 before Update 1, when anonymous LDAP binding for Active Directory is enabled, allows remote attackers to bypass authentication by providing a valid username in conjunction with an empty password. |
| CVE-2012-6325 | Medium | 2012-12-21 | Not applicable | No public exploit | VMware vCenter Server Appliance (vCSA) 5.0 before Update 2 does not properly parse XML documents, which allows remote authenticated users to read arbitrary files via unspecified vectors. |
| CVE-2012-6324 | Medium | 2012-12-21 | Not applicable | No public exploit | Directory traversal vulnerability in VMware vCenter Server Appliance (vCSA) 5.0 before Update 2 and 5.1 before Patch 1 allows remote authenticated users to read arbitrary files via unspecified vectors. |
| CVE-2009-2416 | Medium | 2009-08-11 | Not applicable | No public exploit | Multiple use-after-free vulnerabilities in libxml2 2.5.10, 2.6.16, 2.6.26, 2.6.27, and 2.6.32, and libxml 1.8.17, allow context-dependent attackers to cause a denial of service (application crash) via crafted (1) Notation or (2) Enumeration attribute types in an XML file, as demonstrated by the Codenomicon XML fuzzing framework. |
| CVE-2009-1072 | Medium | 2009-03-25 | Not applicable | No public exploit | nfsd in the Linux kernel before 2.6.28.9 does not drop the CAP_MKNOD capability before handling a user request in a thread, which allows local users to create device nodes, as demonstrated on a filesystem that has been exported with the root_squash option. |