Known vulnerabilities in VMware Avi Load Balancer

Software CPE: cpe:2.3:a:vmware:vmware_avi_load_balancer:*:*:*:*:*:*:*:*
Total vulnerabilities: 9
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting VMware Avi Load Balancer VMware Avi Load Balancer is affected by 9 known vulnerabilities: 2 high, 2 medium, 5 low Critical High Medium Low

Vulnerabilities (9)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU137515 - Improper Authentication
CVE-2026-47865
CWE-287 High
No
No
30.2.7, 31.2.2-2-p3, 32.1.2 14.07.2026 SB2026071487
#VU137516 - Improper Authentication
CVE-2026-47866
CWE-287 Medium
No
No
30.2.7, 31.2.2-2-p3, 32.1.2 14.07.2026 SB2026071487
#VU137517 - Improper Control of Generation of Code ('Code Injection')
CVE-2026-47867
CWE-94 Low
No
No
30.2.7, 31.2.2-2-p3, 32.1.2 14.07.2026 SB2026071487
#VU137518 - Improper Privilege Management
CVE-2026-47868
CWE-269 Low
No
No
30.2.7, 31.2.2-2-p3, 32.1.2 14.07.2026 SB2026071487
#VU137519 - Improper Control of Generation of Code ('Code Injection')
CVE-2026-47869
CWE-94 Low
No
No
30.2.7, 31.2.2-2-p3, 32.1.2 14.07.2026 SB2026071487
#VU137520 - Improper Privilege Management
CVE-2026-47870
CWE-269 Low
No
No
30.2.7, 31.2.2-2-p3, 32.1.2 14.07.2026 SB2026071487
#VU137521 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-47871
CWE-22 Medium
No
No
30.2.7, 31.2.2-2-p3, 32.1.2 14.07.2026 SB2026071487
#VU109738 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2025-41233
CWE-89 Low
No
No
30.1.2-2p3, 30.2.1-2p6, 30.2.2-2p5, 30.2.3, 31.1.1-2p2 23.05.2025 SB2025052331
#VU103416 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2025-22217
CWE-89 High
No
No
30.1.2-2p2, 30.2.1-2p5 29.01.2025 SB2025012909