Known vulnerabilities in VMware ESXi - page 5

Vendor: VMware, Inc
Software: VMware ESXi
Software CPE: cpe:2.3:o:vmware:vmware_esxi:*:*:*:*:*:*:*:*
Website: https://www.vmware.com
Total vulnerabilities: 94
Public exploits: 4
Known exploited (KEV): 7
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting VMware ESXi VMware ESXi is affected by 94 known vulnerabilities: 17 high, 25 medium, 52 low Critical High Medium Low

Vulnerabilities (94)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU14412 - Exposure of sensitive information to an unauthorized actor
CVE-2018-3646		 CWE-200 Low
No
No
 - 15.08.2018 SB2018081502
SB2018081505
SB2018081508
and 36 more
#VU13955 - Exposure of sensitive information to an unauthorized actor
CVE-2018-6971		 CWE-200 Low
No
No
 - 23.07.2018 SB2018072301
SB2018072302
SB2018072303
#VU13954 - NULL Pointer Dereference
CVE-2018-6972		 CWE-476 Low
No
No
 - 20.07.2018 SB2018072301
SB2018072302
SB2018072303
#VU13519 - Out-of-bounds read
CVE-2018-6967		 CWE-125 Low
No
No
 - 29.06.2018 SB2018062907
#VU13518 - Out-of-bounds read
CVE-2018-6966		 CWE-125 Low
No
No
 - 29.06.2018 SB2018062907
#VU13517 - Out-of-bounds read
CVE-2018-6965		 CWE-125 Low
No
No
 - 29.06.2018 SB2018062907
#VU12914 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2018-3640		 CWE-362 Low
No
No
 - 22.05.2018 SB2018052201
SB2018052802
SB2018070908
and 8 more
#VU12911 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2018-3639		 CWE-362 Low
No
No
 - 22.05.2018 SB2018052201
SB2018052207
SB2018052208
and 142 more
#VU9715 - Heap-based Buffer Overflow
CVE-2017-4933		 CWE-122 High
No
No
 - 22.12.2017 SB2017121910
#VU9713 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2017-4940		 CWE-79 Low
No
No
 - 20.12.2017 SB2017121910
#VU9714 - Type confusion
CVE-2017-4941		 CWE-843 High
No
No
 - 19.12.2017 SB2017121910
#VU8444 - NULL Pointer Dereference
CVE-2017-4925		 CWE-476 Low
No
No
 - 15.09.2017 SB2017091503
#VU8443 - Out-of-bounds write
CVE-2017-4924		 CWE-787 Low
No
No
 - 15.09.2017 SB2017091503
#VU1431 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2016-7463		 CWE-79 Low
No
No
 - 20.12.2016 SB2016122001


Showing elements 81 - 100 out of 94