Known vulnerabilities in VMware ESXi - page 4

Vendor: VMware, Inc
Software: VMware ESXi
Software CPE: cpe:2.3:o:vmware:vmware_esxi:*:*:*:*:*:*:*:*
Website: https://www.vmware.com
Total vulnerabilities: 94
Public exploits: 4
Known exploited (KEV): 7
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting VMware ESXi VMware ESXi is affected by 94 known vulnerabilities: 17 high, 25 medium, 52 low Critical High Medium Low

Vulnerabilities (94)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU27431 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-3955		 CWE-79 Low
No
No
 ESXi650-201912104-SG, ESXi670-202004103-SG 29.04.2020 SB2020042914
SB2022102726
SB2022110107
#VU23432 - Out-of-bounds write
CVE-2019-5544		 CWE-787 High
Available
Exploited
 ESXi600-201912001, ESXi650-201912001, ESXi670-201912001 06.12.2019 SB2019120602
SB2019121611
SB2020012228
and 6 more
#VU22712 - Memory corruption
CVE-2018-12207		 CWE-119 Low
No
No
 ESXi600-201911401, ESXi600-201911402, ESXi650-201911401, ESXi650-201911402, ESXi670-201911401, ESXi670-201911402 12.11.2019 SB2019111221
SB2019111301
SB2019111332
and 38 more
#VU22704 - Resource Management Errors
CVE-2019-11135		 CWE-399 Low
No
No
 ESXi600-201911401, ESXi600-201911402, ESXi650-201911401, ESXi650-201911402, ESXi670-201911401, ESXi670-201911402 12.11.2019 SB2019111216
SB2019111332
SB2019111333
and 60 more
#VU22410 - Out-of-bounds read
CVE-2019-5520		 CWE-125 Medium
No
No
 ESXi650-201903001, ESXi670-201904101-SG 30.10.2019 SB2019080206
#VU22409 -
CVE-2019-5519		 Low
No
No
 ESXi600-201903001, ESXi650-201903001, ESXi670-201903001 30.10.2019 SB2019040106
SB2022110418
#VU22408 - Memory corruption
CVE-2019-5518		 CWE-119 Low
No
No
 ESXi600-201903001, ESXi650-201903001, ESXi670-201903001 30.10.2019 SB2019040106
SB2022110418
#VU22328 - Out-of-bounds read
CVE-2019-5517		 CWE-125 Medium
No
No
 ESXi650-201903001, ESXi670-201904101-SG 29.10.2019 SB2019080206
SB2022110418
#VU22327 - Out-of-bounds read
CVE-2019-5516		 CWE-125 Medium
No
No
 ESXi650-201903001, ESXi670-201904101-SG 29.10.2019 SB2019080206
SB2022110418
#VU22326 - Exposed Dangerous Method or Function
CVE-2019-5528		 CWE-749 Medium
No
No
 ESXi650-201907201-UG, ESXi670-201908201-UG 29.10.2019 SB2019071114
SB2022110418
#VU22319 - Uncaught Exception
CVE-2019-5536		 CWE-248 Medium
No
No
 ESXi650-201910401-SG, ESXi670-201908101-SG 29.10.2019 SB2019092101
SB2022110311
SB2022110416
#VU21241 - Use After Free
CVE-2019-5527		 CWE-416 Medium
No
No
 - 21.09.2019 SB2019092101
SB2019092102
#VU21147 - Insufficient Session Expiration
CVE-2019-5531		 CWE-613 Low
No
No
 - 17.09.2019 SB2019091707
SB2022110418
#VU19921 - Out-of-bounds read
CVE-2019-5684		 CWE-125 Medium
No
No
 - 02.08.2019 SB2019080206
SB2022110418
#VU19920 - Out-of-bounds read
CVE-2019-5521		 CWE-125 Medium
No
No
 - 02.08.2019 SB2019080206
SB2022110418
#VU15787 - Stack-based buffer overflow
CVE-2018-6982		 CWE-121 Low
No
No
 - 09.11.2018 SB2018110912
SB2022111030
SB2022111120
#VU15786 - Stack-based buffer overflow
CVE-2018-6981		 CWE-121 Low
No
No
 - 09.11.2018 SB2018110912
SB2022111030
SB2022111120
#VU15377 - Memory corruption
CVE-2018-6974		 CWE-119 Medium
No
No
 - 16.10.2018 SB2018101703
SB2018101704
SB2018101705
#VU15230 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2018-6977		 CWE-835 Low
No
No
 - 09.10.2018 SB2018100914
#VU11326 - Improper input validation
CVE-2017-16544		 CWE-20 High
No
No
 - 29.03.2018 SB2018032608
SB2018030127
SB2018030128
and 7 more


Showing elements 61 - 80 out of 94