Explore every threat in the CISA Known Exploited Vulnerabilities (KEV) catalog, enhanced with plain-English executive analysis, AWS relevance, and technical remediation guidance.
| CVE | Vendor | Product | Added | Due | Status |
|---|---|---|---|---|---|
|
CVE-2022-22947 — VMware Spring Cloud Gateway Code Injection Vulnerability
Spring Cloud Gateway applications are vulnerable to a code injection attack when the Gateway Actuator endpoint is enabled, exposed and unsecured.
|
VMware | Spring Cloud Gateway | May 16, 2022 | Jun 6, 2022 | |
|
CVE-2022-22960 — VMware Multiple Products Privilege Escalation Vulnerability
VMware Workspace ONE Access, Identity Manager and vRealize Automation contain a privilege escalation vulnerability due to improper permissions in support scripts.
|
VMware | Multiple Products | Apr 15, 2022 | May 6, 2022 | |
|
CVE-2022-22954 — VMware Workspace ONE Access and Identity Manager Server-Side Template Injection Vulnerability
VMware Workspace ONE Access and Identity Manager allow for remote code execution due to server-side template injection.
|
VMware | Workspace ONE Access and Identity Manager | Apr 14, 2022 | May 5, 2022 | Ransomware |
|
CVE-2022-22965 — Spring Framework JDK 9+ Remote Code Execution Vulnerability
Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution (RCE) via data binding.
|
VMware | Spring Framework | Apr 4, 2022 | Apr 25, 2022 | |
|
CVE-2018-6961 — VMware SD-WAN Edge by VeloCloud Command Injection Vulnerability
VMware SD-WAN Edge by VeloCloud contains a command injection vulnerability in the local web UI component. Successful exploitation of this issue could result in remote code execution.
|
VMware | SD-WAN Edge | Mar 25, 2022 | Apr 15, 2022 | |
|
CVE-2021-21973 — VMware vCenter Server and Cloud Foundation Server Side Request Forgery (SSRF) Vulnerability
VMware vCenter Server and Cloud Foundation Server contain a SSRF vulnerability due to improper validation of URLs in a vCenter Server plugin. This allows for information disclosure.
|
VMware | vCenter Server and Cloud Foundation | Mar 7, 2022 | Mar 21, 2022 | |
|
CVE-2021-21975 — VMware Server Side Request Forgery in vRealize Operations Manager API
Server Side Request Forgery (SSRF) in vRealize Operations Manager API prior to 8.4 may allow a malicious actor with network access to the vRealize Operations Manager API to perform a SSRF attack to steal administrative credentials.
|
VMware | vRealize Operations Manager API | Jan 18, 2022 | Feb 1, 2022 | Ransomware |
|
CVE-2021-22017 — VMware vCenter Server Improper Access Control
Rhttproxy as used in vCenter Server contains a vulnerability due to improper implementation of URI normalization.
|
VMware | vCenter Server | Jan 10, 2022 | Jan 24, 2022 | |
|
CVE-2019-5544 — VMware ESXi and Horizon DaaS OpenSLP Heap-Based Buffer Overflow Vulnerability
VMware ESXi and Horizon Desktop as a Service (DaaS) OpenSLP contains a heap-based buffer overflow vulnerability that allows an attacker with network access to port 427 to overwrite the heap of the OpenSLP service to perform remote code execution.
|
VMware | VMware ESXi and Horizon DaaS | Nov 3, 2021 | May 3, 2022 | Ransomware |
|
CVE-2020-3950 — VMware Multiple Products Privilege Escalation Vulnerability
VMware Fusion, Remote Console (VMRC) for Mac, and Horizon Client for Mac contain a privilege escalation vulnerability due to improper use of setuid binaries that allows attackers to escalate privileges to root.
|
VMware | Multiple Products | Nov 3, 2021 | May 3, 2022 |
Spring Cloud Gateway applications are vulnerable to a code injection attack when the Gateway Actuator endpoint is enabled, exposed and unsecured.
Spring Cloud Gateway · May 16, 2022
VMware Workspace ONE Access, Identity Manager and vRealize Automation contain a privilege escalation vulnerability due to improper permissions in support scripts.
Multiple Products · Apr 15, 2022
VMware Workspace ONE Access and Identity Manager allow for remote code execution due to server-side template injection.
Workspace ONE Access and Identity Manager · Apr 14, 2022
Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution (RCE) via data binding.
Spring Framework · Apr 4, 2022
VMware SD-WAN Edge by VeloCloud contains a command injection vulnerability in the local web UI component. Successful exploitation of this issue could result in remote code execution.
SD-WAN Edge · Mar 25, 2022
VMware vCenter Server and Cloud Foundation Server contain a SSRF vulnerability due to improper validation of URLs in a vCenter Server plugin. This allows for information disclosure.
vCenter Server and Cloud Foundation · Mar 7, 2022
Server Side Request Forgery (SSRF) in vRealize Operations Manager API prior to 8.4 may allow a malicious actor with network access to the vRealize Operations Manager API to perform a SSRF attack to steal administrative credentials.
vRealize Operations Manager API · Jan 18, 2022
Rhttproxy as used in vCenter Server contains a vulnerability due to improper implementation of URI normalization.
vCenter Server · Jan 10, 2022
VMware ESXi and Horizon Desktop as a Service (DaaS) OpenSLP contains a heap-based buffer overflow vulnerability that allows an attacker with network access to port 427 to overwrite the heap of the OpenSLP service to perform remote code execution.
VMware ESXi and Horizon DaaS · Nov 3, 2021
VMware Fusion, Remote Console (VMRC) for Mac, and Horizon Client for Mac contain a privilege escalation vulnerability due to improper use of setuid binaries that allows attackers to escalate privileges to root.
Multiple Products · Nov 3, 2021