Known vulnerabilities in open-vm-tools

Vendor: Broadcom
Software: open-vm-tools
Software CPE: cpe:2.3:a:broadcom:open-vm-tools:*:*:*:*:*:*:*:*
Website: https://www.broadcom.com/
Total vulnerabilities: 5
Public exploits: 0
Known exploited (KEV): 1
Highest CVSSv4 Score: 8.7

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting open-vm-tools open-vm-tools is affected by 5 known vulnerabilities: 1 high, 1 medium, 3 low Critical High Medium Low

Vulnerabilities (5)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU108928 - Improper input validation
CVE-2025-22247		 CWE-20 Low
No
No
 - 12.05.2025 SB2025051234
SB2025051306
SB2025051501
and 9 more
#VU82560 - Improper Access Control
CVE-2023-34059		 CWE-284 Low
No
No
 12.3.5 30.10.2023 SB2023103026
SB2023103031
SB2023103032
and 32 more
#VU80188 - Cryptographic Issues
CVE-2023-20900		 CWE-310 Medium
No
No
 12.3.0 31.08.2023 SB2023083119
SB2023083154
SB2023083155
and 38 more
#VU77208 - Improper Authentication
CVE-2023-20867		 CWE-287 High
No
Exploited
 12.2.5 13.06.2023 SB2023061339
SB2023061449
SB2023061649
and 34 more
#VU66726 - Permissions, Privileges, and Access Controls
CVE-2022-31676		 CWE-264 Low
No
No
 12.1.0 23.08.2022 SB2022082317
SB2022082416
SB2022082423
and 36 more