VMware: 악용된 취약점
- 26악용된 취약점
- 9랜섬웨어에 사용됨
- 2025. 3. 4.가장 최근 추가
- vCenter Server 9
- ESXi 3
- Multiple Products 3
- ESXi, Workstation, and Fusion 1
- ESXi and Workstation 1
- Tools 1
- Aria Operations for Networks 1
- Spring Cloud Gateway 1
- Workspace ONE Access and Identity Manager 1
- Spring Framework 1
- SD-WAN Edge 1
- vCenter Server and Cloud Foundation 1
- vRealize Operations Manager API 1
- VMware ESXi and Horizon DaaS 1
| 추가됨 | 취약점 | 제품 | 심각도 | 공격 가능성 |
|---|---|---|---|---|
| 2025. 3. 4. | Information Disclosure | ESXi, Workstation, and Fusion | 높음 7.1 | 1.6% |
| 2025. 3. 4. | Arbitrary Write | ESXi | 높음 8.2 | 1.0% |
| 2025. 3. 4. | TOCTOU Race Condition | ESXi and Workstation | 치명적 9.3 | 1.6% |
| 2024. 11. 20. | Privilege Escalation | vCenter Server | 높음 7.5 | 17% |
| 2024. 11. 20. | Heap-Based Buffer Overflow | vCenter Server | 치명적 9.8 | 55% |
| 2024. 7. 30. | Authentication Bypass | ESXi | 보통 6.8 | 27% |
| 2024. 7. 17. | Incorrect Default File Permissions Vulnerability | vCenter Server | 보통 6.5 | 13% |
| 2024. 1. 22. | Out-of-Bounds Write | vCenter Server | 치명적 9.8 | 99.2% |
| 2023. 6. 23. | Authentication Bypass | Tools | 낮음 3.9 | 14% |
| 2023. 6. 22. | Command Injection | Aria Operations for Networks | 치명적 9.8 | 98% |
| 2022. 5. 16. | Code Injection | Spring Cloud Gateway | 치명적 10.0 | 98% |
| 2022. 4. 15. | Privilege Escalation | Multiple Products | 높음 7.8 | 36% |
| 2022. 4. 14. | Server-Side Template Injection | Workspace ONE Access and Identity Manager | 치명적 9.8 | >99.9% |
| 2022. 4. 4. | JDK 9+ Remote Code Execution | Spring Framework | 치명적 9.8 | 99.6% |
| 2022. 3. 25. | by VeloCloud Command Injection | SD-WAN Edge | 높음 8.1 | 85% |
| 2022. 3. 7. | Server Side Request Forgery (SSRF) | vCenter Server and Cloud Foundation | 보통 5.3 | 88% |
| 2022. 1. 18. | Server Side Request Forgery in vRealize Operations Manager API | vRealize Operations Manager API | 치명적 9.8 | 78% |
| 2022. 1. 10. | Improper Access Control | vCenter Server | 보통 5.3 | 49% |
| 2021. 11. 3. | File Upload | vCenter Server | 치명적 9.8 | >99.9% |
| 2021. 11. 3. | Improper Input Validation | vCenter Server | 치명적 9.8 | >99.9% |
| 2021. 11. 3. | Remote Code Execution | vCenter Server | 치명적 9.8 | 99.9% |
| 2021. 11. 3. | Multiple VMware Products Command Injection | Multiple Products | 치명적 9.1 | 17% |
| 2021. 11. 3. | OpenSLP Use-After-Free | ESXi | 치명적 9.8 | 83% |
| 2021. 11. 3. | Information Disclosure | vCenter Server | 치명적 9.8 | 90% |
| 2021. 11. 3. | Privilege Escalation | Multiple Products | 높음 7.8 | 7.3% |
| 2021. 11. 3. | ESXi and Horizon DaaS OpenSLP Heap-Based Buffer Overflow | VMware ESXi and Horizon DaaS | 치명적 9.8 | 98% |
출처: Known Exploited Vulnerabilities(CISA, 퍼블릭 도메인), CVE records(cve.org), EPSS(FIRST). 공격 가능성은 누군가 향후 30일 안에 이 결함을 악용하려 할 확률에 대한 EPSS 추정치입니다.