目标达成 感谢每一位支持者 — 我们达成了 100% 目标！

目标: 1000 元 · 已筹: 1359 元

100%
请我们喝杯咖啡

VMware 厂商漏洞列表 / CVE 中文分析 241

VMware 厂商相关 241 条 CVE 漏洞，含 AI 中文分析、POC、CVSS 评分与受影响产品。

VMware 主要提供虚拟化及云基础架构解决方案，其软件生态因广泛部署而成为攻击重点。历史漏洞多涉及远程代码执行、权限提升及跨站脚本，常源于内存处理缺陷或配置不当。近期重大事件包括被勒索软件组织攻击导致数据泄露，促使厂商强化供应链安全与补丁响应机制。鉴于已收录 219 条 CVE，用户需持续更新组件以缓解潜在风险，确保基础设施稳定性。

Top products by VMware: Workstation ESXi VMware ESXi SALT VMware Aria Operations Avi Load Balancer Cloud Foundation Spring Framework Workstation Pro/Player vCenter Server VMware vCenter Server (vCenter Server) Spring AI Fusion VCF operations VMware Aria Operations for Logs VMware Workstation Airwatch Console VMware vCenter Server vRealize Automation VMware Tools VMware NSX VMware ESXi, Workstation, and Fusion VMware Aria Automation Workstation and Fusion vRealize Operations for Horizon Adapter Salt Project VMware Fusion Spring Security vSphere Data Protection (VDP) VMware Enhanced Authentication Plug-in (EAP)
CVE ID 标题 CVSS 风险等级 Published
CVE-2024-38834 VMware Aria Operations 安全漏洞 — VMware Aria Operations 6.5 Medium 2024-11-26
CVE-2024-38833 VMware Aria Operations 安全漏洞 — VMware Aria Operations 6.8 Medium 2024-11-26
CVE-2024-38832 VMware Aria Operations 安全漏洞 — VMware Aria Operations 7.1 High 2024-11-26
CVE-2024-38831 VMware Aria Operations 安全漏洞 — VMware Aria Operations 7.8 High 2024-11-26
CVE-2024-38830 VMware Aria Operations 安全漏洞 — VMware Aria Operations 7.8 High 2024-11-26
CVE-2024-38820 VMware Spring Framework 安全漏洞 — Spring 3.1 Low 2024-10-18
CVE-2024-22280 VMware Aria Automation 安全漏洞 — VMware Aria Automation 8.5 High 2024-07-11
CVE-2024-22232 SaltStack Salt 安全漏洞 — Salt Project 7.7 High 2024-06-27
CVE-2024-22231 SaltStack Salt 安全漏洞 — Salt Project 5.0 Medium 2024-06-27
CVE-2024-22266 VMware Avi Load Balancer 安全漏洞 — VMware Avi Load Balancer 6.5 Medium 2024-05-08
CVE-2024-22264 VMware Avi Load Balancer 安全漏洞 — VMware Avi Load Balancer 7.2 High 2024-05-08
CVE-2024-22250 VMware Enhanced Authentication Plug-in 安全漏洞 — VMware Enhanced Authentication Plug-in (EAP) CWE-384 7.8 High 2024-02-20
CVE-2024-22245 VMware Enhanced Authentication Plug-in 安全漏洞 — VMware Enhanced Authentication Plug-in (EAP) CWE-287 9.6 Critical 2024-02-20
CVE-2023-34056 VMware vCenter Server 安全漏洞 — VMware vCenter Server 4.3 Medium 2023-10-25
CVE-2023-34048 VMware vCenter Server 缓冲区错误漏洞 — VMware vCenter Server 9.8 Critical 2023-10-25
CVE-2023-34045 VMware Fusion 安全漏洞 — Fusion 6.6 Medium 2023-10-20
CVE-2023-34046 VMware Fusion 安全漏洞 — Fusion 6.7 Medium 2023-10-20
CVE-2023-34044 VMware Workstation 缓冲区错误漏洞 — Workstation 7.1 High 2023-10-20
CVE-2023-20891 VMware Tanzu 日志信息泄露漏洞 — VMware Tanzu Application Service for VMs CWE-532 6.5 Medium 2023-07-26
CVE-2023-20896 VMware vCenter Server 缓冲区错误漏洞 — VMware vCenter Server (vCenter Server) 5.9 Medium 2023-06-22
CVE-2023-20895 VMware vCenter Server 缓冲区错误漏洞 — VMware vCenter Server (vCenter Server) 8.1 High 2023-06-22
CVE-2023-20894 VMware vCenter Server 缓冲区错误漏洞 — VMware vCenter Server (vCenter Server) 8.1 High 2023-06-22
CVE-2023-20893 VMware vCenter Server 资源管理错误漏洞 — VMware vCenter Server (vCenter Server) 8.1 High 2023-06-22
CVE-2023-20892 VMware vCenter Server 缓冲区错误漏洞 — VMware vCenter Server (vCenter Server) 8.1 High 2023-06-22
CVE-2023-20867 VMware Tools 授权问题漏洞 — VMware Tools CWE-287 3.9 Low 2023-06-13
CVE-2022-22964 VMware Horizon 权限许可和访问控制问题漏洞 — VMware Horizon Agent for Linux 7.8 - 2022-04-11
CVE-2022-22962 VMware Horizon 后置链接漏洞 — VMware Horizon Agent for Linux 7.8 - 2022-04-11
CVE-2020-3971 多款VMware产品缓冲区错误漏洞 — VMware ESXi 7.1 - 2020-06-25
CVE-2020-3965 多款VMware产品缓冲区错误漏洞 — VMware ESXi 4.7 - 2020-06-25
CVE-2020-3964 多款VMware产品信息泄露漏洞 — VMware ESXi 4.7 - 2020-06-25

本页汇总了 VMware 厂商截至目前公开的全部 241 条 CVE 漏洞。每条漏洞均包含 CVSS 评分、CWE 弱点分类、受影响产品与参考链接，并附带 AI 生成的中文分析以便快速判断风险。