目標達成 すべての支援者に感謝 — 100%達成しました！

目標: 1000 CNY · 調達済み: 1336 CNY

100%
コーヒーを一杯おごる

vmware 厂商漏洞列表 / CVE 中文分析 238

vmware 厂商相关 238 条 CVE 漏洞，含 AI 中文分析、POC、CVSS 评分与受影响产品。

VMware 主要提供虚拟化及云基础架构解决方案，其软件生态因广泛部署而成为攻击重点。历史漏洞多涉及远程代码执行、权限提升及跨站脚本，常源于内存处理缺陷或配置不当。近期重大事件包括被勒索软件组织攻击导致数据泄露，促使厂商强化供应链安全与补丁响应机制。鉴于已收录 219 条 CVE，用户需持续更新组件以缓解潜在风险，确保基础设施稳定性。

上位製品 vmware: Workstation ESXi VMware ESXi VMware Aria Operations SALT Cloud Foundation Avi Load Balancer Spring Framework vCenter Server Workstation Pro/Player VMware vCenter Server (vCenter Server) Spring AI Fusion VCF operations VMware Aria Operations for Logs VMware Aria Automation VMware ESXi, Workstation, and Fusion VMware Tools vRealize Operations for Horizon Adapter VMware NSX vRealize Automation Airwatch Console Workstation and Fusion VMware vCenter Server VMware Avi Load Balancer VMware Horizon Agent for Linux VMware ESXi, Workstation, Fusion Salt Project VMware Workstation VMware Enhanced Authentication Plug-in (EAP)
CVE IDタイトルCVSS深刻度公開日
CVE-2026-22715 VMware Workstation/Fusion NAT vulnerability — Workstation 5.9 Medium2026-02-26
CVE-2026-22721 VMware Aria Operations privilege escalation vulnerability — VMware Aria OperationsCWE-269 6.2 Medium2026-02-25
CVE-2026-22720 VMware Aria Operations stored cross-site scripting vulnerability — VMware Aria OperationsCWE-79 8.0 High2026-02-25
CVE-2026-22719 VMware Aria Operations command injection vulnerability — VMware Aria Operations 8.1 High2026-02-25
CVE-2026-2818 Zip Slip Path Traversal in Snapshot Archive Extraction (Windows-Specific) — Spring Data GeodeCWE-23 8.2 High2026-02-20
CVE-2026-2817 Spring Data Geode Insecure Temporary Directory Usage — Spring Data GeodeCWE-538 4.4 Medium2026-02-19
CVE-2025-41254 Spring Framework STOMP CSRF Vulnerability — Spring FrameworkCWE-352 4.3 Medium2025-10-16
CVE-2025-41253 Spring Cloud Gateway Webflux SpEL Injection Vulnerability Allowing Exposure of Environment Variables — Spring Cloud Gateway Server WebfluxCWE-917 7.5 High2025-10-16
CVE-2025-41252 Username enumeration vulnerability — NSXCWE-203 7.5 High2025-09-29
CVE-2025-41251 Weak password recovery vulnerability — NSXCWE-640 8.1 High2025-09-29
CVE-2025-41250 Header injection vulnerability — vCenterCWE-77 8.5 High2025-09-29
CVE-2025-41245 VMSA-2025-0015: VMware Aria Operations and VMware Tools updates address multiple vulnerabilities (CVE-2025-41244,CVE-2025-41245, CVE-2025-41246) — VMware Aria OperationsCWE-1188 4.9 Medium2025-09-29
CVE-2025-41244 VMSA-2025-0015: VMware Aria Operations and VMware Tools updates address multiple vulnerabilities (CVE-2025-41244,CVE-2025-41245, CVE-2025-41246) — VCF operationsCWE-267 7.8 High2025-09-29
CVE-2025-41246 Improper authorisation vulnerability — ToolsCWE-863 7.6 High2025-09-29
CVE-2025-41249 CVE-2025-41249: Spring Framework Annotation Detection Vulnerability — Spring Framework 7.5 High2025-09-16
CVE-2025-41248 CVE-2025-41248: Spring Security authorization bypass for method security annotations on parameterized types — Spring Security 7.5 High2025-09-16
CVE-2025-41242 CVE-2025-41242: Path traversal vulnerability on non-compliant Servlet containers — Spring Framework 5.9 Medium2025-08-18
CVE-2025-41241 Denial-of-service vulnerability — vCenterCWE-754 4.4 Medium2025-07-29
CVE-2025-41240 Mounted Kubernetes Secrets under a predictable path located within the web server document root — bitnamicharts/appsmith 10.0 Critical2025-07-24
CVE-2025-22227 CVE-2025-22227: Authentication Leak On Redirect With Reactor Netty HTTP Client — Reactor Netty 6.1 Medium2025-07-16
CVE-2025-41239 vSockets information-disclosure vulnerability — ESXiCWE-908 7.1 High2025-07-15
CVE-2025-41238 PVSCSI heap-overflow vulnerability — ESXiCWE-787 9.3 Critical2025-07-15
CVE-2025-41237 VMCI integer-underflow vulnerability — Cloud FoundationCWE-787 9.3 Critical2025-07-15
CVE-2025-41236 VMXNET3 integer-overflow vulnerability — ESXiCWE-787 9.3 Critical2025-07-15
CVE-2024-38824 CVE-2024-38824 salt advisory — SALT 9.6 Critical2025-06-13
CVE-2025-22242 CVE-2025-22242 salt advisory — SALT 5.6 Medium2025-06-13
CVE-2025-22241 CVE-2025-22241 salt advisory — SALT 5.6 Medium2025-06-13
CVE-2025-22240 CVE-2025-22240 salt advisory — SALT 6.3 Medium2025-06-13
CVE-2025-22239 CVE-2025-22239 salt advisory — SALT 8.1 High2025-06-13
CVE-2025-22238 CVE-2025-22238 salt advisory — SALT 4.2 Medium2025-06-13

本页汇总了 vmware 厂商截至目前公开的全部 238 条 CVE 漏洞。每条漏洞均包含 CVSS 评分、CWE 弱点分类、受影响产品与参考链接，并附带 AI 生成的中文分析以便快速判断风险。