VMware: ثغرات مُستغلّة
- 26ثغرة مُستغلّة
- 9تستخدمها برامج الفدية
- 04/03/2025آخر ما أُضيف
- vCenter Server 9
- ESXi 3
- Multiple Products 3
- ESXi, Workstation, and Fusion 1
- ESXi and Workstation 1
- Tools 1
- Aria Operations for Networks 1
- Spring Cloud Gateway 1
- Workspace ONE Access and Identity Manager 1
- Spring Framework 1
- SD-WAN Edge 1
- vCenter Server and Cloud Foundation 1
- vRealize Operations Manager API 1
- VMware ESXi and Horizon DaaS 1
| أُضيفت | الثغرة | المنتج | الخطورة | احتمال الهجوم |
|---|---|---|---|---|
| 04/03/2025 | Information Disclosure | ESXi, Workstation, and Fusion | مرتفع 7.1 | 1.6% |
| 04/03/2025 | Arbitrary Write | ESXi | مرتفع 8.2 | 1.0% |
| 04/03/2025 | TOCTOU Race Condition | ESXi and Workstation | حرجة 9.3 | 1.6% |
| 20/11/2024 | Privilege Escalation | vCenter Server | مرتفع 7.5 | 17% |
| 20/11/2024 | Heap-Based Buffer Overflow | vCenter Server | حرجة 9.8 | 55% |
| 30/07/2024 | Authentication Bypass | ESXi | متوسطة 6.8 | 27% |
| 17/07/2024 | Incorrect Default File Permissions Vulnerability | vCenter Server | متوسطة 6.5 | 13% |
| 22/01/2024 | Out-of-Bounds Write | vCenter Server | حرجة 9.8 | 99.2% |
| 23/06/2023 | Authentication Bypass | Tools | منخفضة 3.9 | 14% |
| 22/06/2023 | Command Injection | Aria Operations for Networks | حرجة 9.8 | 98% |
| 16/05/2022 | Code Injection | Spring Cloud Gateway | حرجة 10.0 | 98% |
| 15/04/2022 | Privilege Escalation | Multiple Products | مرتفع 7.8 | 36% |
| 14/04/2022 | Server-Side Template Injection | Workspace ONE Access and Identity Manager | حرجة 9.8 | >99.9% |
| 04/04/2022 | JDK 9+ Remote Code Execution | Spring Framework | حرجة 9.8 | 99.6% |
| 25/03/2022 | by VeloCloud Command Injection | SD-WAN Edge | مرتفع 8.1 | 85% |
| 07/03/2022 | Server Side Request Forgery (SSRF) | vCenter Server and Cloud Foundation | متوسطة 5.3 | 88% |
| 18/01/2022 | Server Side Request Forgery in vRealize Operations Manager API | vRealize Operations Manager API | حرجة 9.8 | 78% |
| 10/01/2022 | Improper Access Control | vCenter Server | متوسطة 5.3 | 49% |
| 03/11/2021 | File Upload | vCenter Server | حرجة 9.8 | >99.9% |
| 03/11/2021 | Improper Input Validation | vCenter Server | حرجة 9.8 | >99.9% |
| 03/11/2021 | Remote Code Execution | vCenter Server | حرجة 9.8 | 99.9% |
| 03/11/2021 | Multiple VMware Products Command Injection | Multiple Products | حرجة 9.1 | 17% |
| 03/11/2021 | OpenSLP Use-After-Free | ESXi | حرجة 9.8 | 83% |
| 03/11/2021 | Information Disclosure | vCenter Server | حرجة 9.8 | 90% |
| 03/11/2021 | Privilege Escalation | Multiple Products | مرتفع 7.8 | 7.3% |
| 03/11/2021 | ESXi and Horizon DaaS OpenSLP Heap-Based Buffer Overflow | VMware ESXi and Horizon DaaS | حرجة 9.8 | 98% |
المصادر: Known Exploited Vulnerabilities (CISA، ملكية عامة)، وCVE records (cve.org)، وEPSS (FIRST). احتمال الهجوم هو تقدير EPSS لاحتمال أن يحاول أحد استغلال الثغرة خلال الأيام الـ30 القادمة.