Known vulnerabilities in Cloud Foundation - page 3

Software CPE: cpe:2.3:a:vmware:vmware_cloud_foundation:*:*:*:*:*:*:*:*
Total vulnerabilities: 77
Public exploits: 12
Known exploited (KEV): 9
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Cloud Foundation Cloud Foundation is affected by 77 known vulnerabilities: 5 critical, 8 high, 25 medium, 39 low Critical High Medium Low

Vulnerabilities (77)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU56809 - Improper input validation
CVE-2021-22020
CWE-20 Low
No
No
3.10.2.2 21.09.2021 SB2021092117
SB2021092118
SB2021092918
and 2 more
#VU56808 - Improper input validation
CVE-2021-22019
CWE-20 Medium
No
No
3.10.2.2 21.09.2021 SB2021092117
SB2021092118
SB2021092918
and 2 more
#VU56807 - Permissions, Privileges, and Access Controls
CVE-2021-22018
CWE-264 Medium
No
No
4.3.1 21.09.2021 SB2021092117
SB2021092118
SB2021092918
and 2 more
#VU56806 - Improper Authorization
CVE-2021-22017
CWE-285 Medium
No
Exploited
3.10.2.2 21.09.2021 SB2021092117
SB2021092118
SB2021092918
and 3 more
#VU56805 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-22016
CWE-79 Low
No
No
3.10.2.2 21.09.2021 SB2021092117
SB2021092118
SB2021092918
and 3 more
#VU56804 - Incorrect Default Permissions
CVE-2021-22015
CWE-276 Low
Available
No
3.10.2.2 21.09.2021 SB2021092117
SB2021092118
SB2021092918
and 2 more
#VU56803 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-22014
CWE-94 Low
No
No
3.10.2.2 21.09.2021 SB2021092117
SB2021092118
SB2021092918
and 2 more
#VU56800 - Improper Authentication
CVE-2021-22011
CWE-287 Medium
No
No
3.10.2.2, 4.3.1 21.09.2021 SB2021092117
SB2021092118
SB2021092918
and 3 more
#VU56799 - Resource exhaustion
CVE-2021-22010
CWE-400 Medium
No
No
3.10.2.2 21.09.2021 SB2021092117
SB2021092118
SB2021092918
and 3 more
#VU56798 - Resource exhaustion
CVE-2021-22009
CWE-400 Medium
No
No
3.10.2.2 21.09.2021 SB2021092117
SB2021092118
SB2021092918
and 3 more
#VU56797 - Exposure of sensitive information to an unauthorized actor
CVE-2021-22008
CWE-200 Medium
No
No
3.10.2.2 21.09.2021 SB2021092117
SB2021092118
SB2021092918
and 3 more
#VU56796 - Exposure of sensitive information to an unauthorized actor
CVE-2021-22007
CWE-200 Low
No
No
3.10.2.2 21.09.2021 SB2021092117
SB2021092118
SB2021092918
and 2 more
#VU56795 - Improper Authorization
CVE-2021-22006
CWE-285 High
Available
No
3.10.2.2 21.09.2021 SB2021092117
SB2021092118
SB2021092918
and 3 more
#VU56793 - Server-Side Request Forgery (SSRF)
CVE-2021-21993
CWE-918 Medium
No
No
3.10.2.2 21.09.2021 SB2021092117
SB2021092118
SB2021092918
and 3 more
#VU56792 - Improper input validation
CVE-2021-21992
CWE-20 Medium
No
No
3.10.2.2 21.09.2021 SB2021092117
SB2021092118
SB2021092918
and 3 more
#VU56791 - Permissions, Privileges, and Access Controls
CVE-2021-21991
CWE-264 Low
No
No
3.10.2.2 21.09.2021 SB2021092117
SB2021092118
SB2021092918
and 3 more
#VU55616 - Unprotected primary channel
CVE-2021-22003
CWE-419 Low
No
No
- 05.08.2021 SB2021080524
SB2021080525
SB2021080526
and 2 more
#VU55615 - Server-Side Request Forgery (SSRF)
CVE-2021-22002
CWE-918 High
No
No
- 05.08.2021 SB2021080524
SB2021080525
SB2021080526
and 3 more
#VU54816 - Out-of-bounds read
CVE-2021-21995
CWE-125 Medium
No
No
3.10.2 13.07.2021 SB2021071366
SB2021071373
SB2021101003
and 2 more
#VU54814 - Improper Authentication
CVE-2021-21994
CWE-287 High
No
No
3.10.2 13.07.2021 SB2021071366
SB2021071373
SB2021101003
and 3 more


Showing elements 41 - 60 out of 77