Known vulnerabilities in Cloud Foundation

Software CPE: cpe:2.3:a:vmware:vmware_cloud_foundation:*:*:*:*:*:*:*:*
Total vulnerabilities: 77
Public exploits: 12
Known exploited (KEV): 9
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Cloud Foundation Cloud Foundation is affected by 77 known vulnerabilities: 5 critical, 8 high, 25 medium, 39 low Critical High Medium Low

Vulnerabilities (77)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU113009 - Missing release of memory after effective lifetime
CVE-2025-41239
CWE-401 Medium
No
No
ESXi70U3w-24784741, ESXi80U3f-24784735 17.07.2025 SB2025071701
SB2025071702
SB2025071703
and 3 more
#VU113008 - Heap-based Buffer Overflow
CVE-2025-41238
CWE-122 Medium
No
No
ESXi70U3w-24784741, ESXi80U3f-24784735 17.07.2025 SB2025071701
SB2025071702
SB2025071703
and 2 more
#VU113007 - Integer underflow
CVE-2025-41237
CWE-191 Medium
No
No
ESXi70U3w-24784741, ESXi80U3f-24784735 17.07.2025 SB2025071701
SB2025071702
SB2025071703
and 2 more
#VU113006 - Integer overflow
CVE-2025-41236
CWE-190 High
No
No
ESXi70U3w-24784741, ESXi80U3f-24784735 17.07.2025 SB2025071701
SB2025071702
SB2025071703
and 2 more
#VU109484 - Missing Authorization
CVE-2025-41231
CWE-862 Low
No
No
5.2.1.2 20.05.2025 SB2025052064
#VU109483 - Exposure of sensitive information to an unauthorized actor
CVE-2025-41230
CWE-200 Medium
No
No
5.2.1.2 20.05.2025 SB2025052064
#VU109482 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2025-41229
CWE-22 High
No
No
5.2.1.2 20.05.2025 SB2025052064
#VU96785 - Out-of-bounds write
CVE-2024-22273
CWE-787 Medium
No
No
5.1.1 04.09.2024 SB2024090421
SB2024090423
SB2024102803
#VU86668 - Permissions, Privileges, and Access Controls
CVE-2024-22235
CWE-264 Low
No
No
- 21.02.2024 SB2024022102
#VU76057 - Permissions, Privileges, and Access Controls
CVE-2023-20880
CWE-264 Low
No
No
- 12.05.2023 SB2023051209
#VU76056 - Permissions, Privileges, and Access Controls
CVE-2023-20879
CWE-264 Low
No
No
- 12.05.2023 SB2023051209
#VU76055 - Deserialization of Untrusted Data
CVE-2023-20878
CWE-502 Low
No
No
- 12.05.2023 SB2023051209
#VU76053 - Permissions, Privileges, and Access Controls
CVE-2023-20877
CWE-264 Medium
No
No
- 12.05.2023 SB2023051209
#VU68721 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2022-31678
CWE-611 Medium
No
No
- 25.10.2022 SB2022102568
#VU68720 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-39144
CWE-94 Critical
Available
Exploited
- 25.10.2022 SB2021082322
SB2022102568
SB2023031801
and 17 more
#VU65989 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-31663
CWE-79 Low
No
No
- 02.08.2022 SB2022080254
SB2022080255
SB2022080257
and 3 more
#VU65986 - Permissions, Privileges, and Access Controls
CVE-2022-31660
CWE-264 Low
Available
No
- 02.08.2022 SB2022080254
SB2022080255
SB2022080257
and 3 more
#VU65985 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2022-31659
CWE-89 Low
No
No
- 02.08.2022 SB2022080254
SB2022080255
SB2022080257
and 3 more
#VU65984 - Improper Control of Generation of Code ('Code Injection')
CVE-2022-31658
CWE-94 Low
No
No
- 02.08.2022 SB2022080254
SB2022080255
SB2022080257
and 3 more
#VU65983 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2022-31657
CWE-601 Low
No
No
- 02.08.2022 SB2022080254
SB2022080255
SB2022080257
and 3 more


Showing elements 1 - 20 out of 77