Known vulnerabilities in VMware Tools 10.3.20

Vendor: Broadcom
Software: VMware Tools
Version: 10.3.20
Software CPE: cpe:2.3:a:broadcom:vmware_tools:*:*:*:*:*:*:*:*
Total vulnerabilities: 10
Public exploits: 0
Known exploited (KEV): 1
Highest CVSSv4 Score: 8.7

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting VMware Tools version 10.3.20 VMware Tools 10.3.20 is affected by 10 vulnerabilities: 1 high, 2 medium, 7 low Critical High Medium Low

Vulnerabilities (10)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU82520 - Improper Authorization
CVE-2023-34058
CWE-285 Medium
No
No
12.3.5 27.10.2023 SB2023102702
SB2023103031
SB2023103032
and 33 more
#VU80188 - Cryptographic Issues
CVE-2023-20900
CWE-310 Medium
No
No
10.3.26, 12.3.0 31.08.2023 SB2023083119
SB2023083154
SB2023083155
and 38 more
#VU77208 - Improper Authentication
CVE-2023-20867
CWE-287 High
No
Exploited
12.2.5 13.06.2023 SB2023061339
SB2023061449
SB2023061649
and 34 more
#VU69696 - Improper input validation
CVE-2022-31693
CWE-20 Low
No
No
12.1.5 29.11.2022 SB2022112944
#VU66726 - Permissions, Privileges, and Access Controls
CVE-2022-31676
CWE-264 Low
No
No
10.3.25, 12.1.0 23.08.2022 SB2022082317
SB2022082416
SB2022082423
and 36 more
#VU63595 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2022-22977
CWE-611 Low
No
No
12.0.5 24.05.2022 SB2022052420
#VU60939 - Untrusted Search Path
CVE-2022-22943
CWE-426 Low
No
No
12.0.0 02.03.2022 SB2022030202
SB2022032127
#VU54314 - Unquoted Search Path or Element
CVE-2021-21999
CWE-428 Low
No
No
11.2.6 22.06.2021 SB2021062226
SB2021101003
#VU54215 - Improper input validation
CVE-2021-21997
CWE-20 Low
No
No
11.3.0 18.06.2021 SB2021061801
SB2021101003
#VU24342 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2020-3941
CWE-362 Low
No
No
11.0.0, 11.0.1, 11.0.5 16.01.2020 SB2020011607