Known vulnerabilities in VMware ESXi 6.0

Vendor: Broadcom
Software: VMware ESXi
Version: 6.0
Software CPE: cpe:2.3:o:broadcom:vmware_esxi:*:*:*:*:*:*:*:*
Website: https://www.broadcom.com/
Total vulnerabilities: 21
Public exploits: 1
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting VMware ESXi version 6.0 VMware ESXi 6.0 is affected by 21 vulnerabilities: 3 high, 4 medium, 14 low Critical High Medium Low

Vulnerabilities (21)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU23432 - Out-of-bounds write
CVE-2019-5544		 CWE-787 High
Public exploit available
Exploited
 ESXi600-201912001, ESXi650-201912001, ESXi670-201912001 06.12.2019 SB2019120602
SB2019121611
SB2020012228
and 6 more
#VU22712 - Memory corruption
CVE-2018-12207		 CWE-119 Low
No
No
 ESXi600-201911401, ESXi600-201911402, ESXi650-201911401, ESXi650-201911402, ESXi670-201911401, ESXi670-201911402 12.11.2019 SB2019111221
SB2019111301
SB2019111332
and 38 more
#VU22704 - Resource Management Errors
CVE-2019-11135		 CWE-399 Low
No
No
 ESXi600-201911401, ESXi600-201911402, ESXi650-201911401, ESXi650-201911402, ESXi670-201911401, ESXi670-201911402 12.11.2019 SB2019111216
SB2019111332
SB2019111333
and 60 more
#VU22409 -
CVE-2019-5519		 Low
No
No
 ESXi600-201903001, ESXi650-201903001, ESXi670-201903001 30.10.2019 SB2019040106
SB2022110418
#VU22408 - Memory corruption
CVE-2019-5518		 CWE-119 Low
No
No
 ESXi600-201903001, ESXi650-201903001, ESXi670-201903001 30.10.2019 SB2019040106
SB2022110418
#VU21241 - Use After Free
CVE-2019-5527		 CWE-416 Medium
No
No
 - 21.09.2019 SB2019092101
SB2019092102
#VU21147 - Insufficient Session Expiration
CVE-2019-5531		 CWE-613 Low
No
No
 - 17.09.2019 SB2019091707
SB2022110418
#VU19921 - Out-of-bounds read
CVE-2019-5684		 CWE-125 Medium
No
No
 - 02.08.2019 SB2019080206
SB2022110418
#VU19920 - Out-of-bounds read
CVE-2019-5521		 CWE-125 Medium
No
No
 - 02.08.2019 SB2019080206
SB2022110418
#VU15786 - Stack-based buffer overflow
CVE-2018-6981		 CWE-121 Low
No
No
 - 09.11.2018 SB2018110912
SB2022111030
SB2022111120
#VU15377 - Memory corruption
CVE-2018-6974		 CWE-119 Medium
No
No
 - 16.10.2018 SB2018101703
SB2018101704
SB2018101705
#VU14412 - Exposure of sensitive information to an unauthorized actor
CVE-2018-3646		 CWE-200 Low
No
No
 - 15.08.2018 SB2018081502
SB2018081505
SB2018081508
and 36 more
#VU13955 - Exposure of sensitive information to an unauthorized actor
CVE-2018-6971		 CWE-200 Low
No
No
 - 23.07.2018 SB2018072301
SB2018072302
SB2018072303
#VU13954 - NULL Pointer Dereference
CVE-2018-6972		 CWE-476 Low
No
No
 - 20.07.2018 SB2018072301
SB2018072302
SB2018072303
#VU12914 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2018-3640		 CWE-362 Low
No
No
 - 22.05.2018 SB2018052201
SB2018052802
SB2018070908
and 8 more
#VU12911 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2018-3639		 CWE-362 Low
No
No
 - 22.05.2018 SB2018052201
SB2018052207
SB2018052208
and 142 more
#VU11326 - Improper input validation
CVE-2017-16544		 CWE-20 High
No
No
 - 29.03.2018 SB2018032608
SB2018030127
SB2018030128
and 7 more
#VU9713 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2017-4940		 CWE-79 Low
No
No
 - 20.12.2017 SB2017121910
#VU9714 - Type confusion
CVE-2017-4941		 CWE-843 High
No
No
 - 19.12.2017 SB2017121910
#VU8444 - NULL Pointer Dereference
CVE-2017-4925		 CWE-476 Low
No
No
 - 15.09.2017 SB2017091503


Showing elements 1 - 20 out of 21