VMware
CISA 가 실제 악용을 확인해 등재한 VMware 제품 취약점입니다. 여기 있다는 것은 이미 공격에 쓰였다는 뜻이고, 없다는 것이 안전하다는 뜻은 아닙니다.
최근 등재
등재일 최신순입니다.
● 실제 악용이 확인됨CVE-2025-22226VMware ESXi, Workstation, and Fusion Information Disclosure Vulnerability1.8%보통6.0● 랜섬웨어 캠페인에 사용됨CVE-2025-22225VMware ESXi Arbitrary Write Vulnerability1.0%높음8.2● 실제 악용이 확인됨CVE-2025-22224VMware ESXi and Workstation TOCTOU Race Condition Vulnerability1.6%높음8.2● 실제 악용이 확인됨CVE-2024-38813VMware vCenter Server Privilege Escalation Vulnerability17.4%심각9.8● 실제 악용이 확인됨CVE-2024-38812VMware vCenter Server Heap-Based Buffer Overflow Vulnerability54.6%심각9.8● 랜섬웨어 캠페인에 사용됨CVE-2024-37085VMware ESXi Authentication Bypass Vulnerability26.8%높음7.2● 실제 악용이 확인됨CVE-2022-22948VMware vCenter Server Incorrect Default File Permissions Vulnerability13.3%보통6.5● 실제 악용이 확인됨CVE-2023-34048VMware vCenter Server Out-of-Bounds Write Vulnerability99.4%심각9.8
등재된 제품
14종
ESXi, Workstation, and Fusion 1ESXi 3ESXi and Workstation 1vCenter Server 9Tools 1Aria Operations for Networks 1Spring Cloud Gateway 1Multiple Products 3Workspace ONE Access and Identity Manager 1Spring Framework 1SD-WAN Edge 1vCenter Server and Cloud Foundation 1vRealize Operations Manager API 1VMware ESXi and Horizon DaaS 1
전체 목록
VMware · 26건
| CVE | 등재일 | 제품 | 취약점 이름 | 악용 확률 | 심각도 | 조치 기한 |
|---|---|---|---|---|---|---|
| CVE-2025-22226 | 2025-03-04 | ESXi, Workstation, and Fusion | VMware ESXi, Workstation, and Fusion Information Disclosure Vulnerabil… | 1.8% | 보통6.0 | 2025-03-25 |
| CVE-2025-22225 랜섬웨어 악용 | 2025-03-04 | ESXi | VMware ESXi Arbitrary Write Vulnerability | 1.0% | 높음8.2 | 2025-03-25 |
| CVE-2025-22224 | 2025-03-04 | ESXi and Workstation | VMware ESXi and Workstation TOCTOU Race Condition Vulnerability | 1.6% | 높음8.2 | 2025-03-25 |
| CVE-2024-38813 | 2024-11-20 | vCenter Server | VMware vCenter Server Privilege Escalation Vulnerability | 17.4% | 심각9.8 | 2024-12-11 |
| CVE-2024-38812 | 2024-11-20 | vCenter Server | VMware vCenter Server Heap-Based Buffer Overflow Vulnerability | 54.6% | 심각9.8 | 2024-12-11 |
| CVE-2024-37085 랜섬웨어 악용 | 2024-07-30 | ESXi | VMware ESXi Authentication Bypass Vulnerability | 26.8% | 높음7.2 | 2024-08-20 |
| CVE-2022-22948 | 2024-07-17 | vCenter Server | VMware vCenter Server Incorrect Default File Permissions Vulnerability | 13.3% | 보통6.5 | 2024-08-07 |
| CVE-2023-34048 | 2024-01-22 | vCenter Server | VMware vCenter Server Out-of-Bounds Write Vulnerability | 99.4% | 심각9.8 | 2024-02-12 |
| CVE-2023-20867 | 2023-06-23 | Tools | VMware Tools Authentication Bypass Vulnerability | 13.5% | 낮음3.9 | 2023-07-14 |
| CVE-2023-20887 | 2023-06-22 | Aria Operations for Networks | Vmware Aria Operations for Networks Command Injection Vulnerability | 98.3% | 심각9.8 | 2023-07-13 |
| CVE-2022-22947 | 2022-05-16 | Spring Cloud Gateway | VMware Spring Cloud Gateway Code Injection Vulnerability | 98.3% | 심각10.0 | 2022-06-06 |
| CVE-2022-22960 | 2022-04-15 | Multiple Products | VMware Multiple Products Privilege Escalation Vulnerability | 35.5% | 높음7.8 | 2022-05-06 |
| CVE-2022-22954 랜섬웨어 악용 | 2022-04-14 | Workspace ONE Access and Identity Manager | VMware Workspace ONE Access and Identity Manager Server-Side Template … | 100.0% | 심각9.8 | 2022-05-05 |
| CVE-2022-22965 | 2022-04-04 | Spring Framework | Spring Framework JDK 9+ Remote Code Execution Vulnerability | 99.6% | 심각9.8 | 2022-04-25 |
| CVE-2018-6961 | 2022-03-25 | SD-WAN Edge | VMware SD-WAN Edge by VeloCloud Command Injection Vulnerability | 86.3% | 높음8.1 | 2022-04-15 |
| CVE-2021-21973 | 2022-03-07 | vCenter Server and Cloud Foundation | VMware vCenter Server and Cloud Foundation Server Side Request Forgery… | 88.0% | 보통5.3 | 2022-03-21 |
| CVE-2021-21975 랜섬웨어 악용 | 2022-01-18 | vRealize Operations Manager API | VMware Server Side Request Forgery in vRealize Operations Manager API | 77.9% | 높음7.5 | 2022-02-01 |
| CVE-2021-22017 | 2022-01-10 | vCenter Server | VMware vCenter Server Improper Access Control | 49.2% | 보통5.3 | 2022-01-24 |
| CVE-2021-21972 랜섬웨어 악용 | 2021-11-03 | vCenter Server | VMware vCenter Server Remote Code Execution Vulnerability | 99.9% | 심각9.8 | 2021-11-17 |
| CVE-2021-21985 랜섬웨어 악용 | 2021-11-03 | vCenter Server | VMware vCenter Server Improper Input Validation Vulnerability | 100.0% | 심각9.8 | 2021-11-17 |
| CVE-2020-4006 | 2021-11-03 | Multiple Products | Multiple VMware Products Command Injection Vulnerability | 17.3% | 심각9.1 | 2022-05-03 |
| CVE-2020-3992 랜섬웨어 악용 | 2021-11-03 | ESXi | VMware ESXi OpenSLP Use-After-Free Vulnerability | 83.0% | 심각9.8 | 2022-05-03 |
| CVE-2019-5544 랜섬웨어 악용 | 2021-11-03 | VMware ESXi and Horizon DaaS | VMware ESXi and Horizon DaaS OpenSLP Heap-Based Buffer Overflow Vulner… | 97.3% | 심각9.8 | 2022-05-03 |
| CVE-2020-3950 | 2021-11-03 | Multiple Products | VMware Multiple Products Privilege Escalation Vulnerability | 7.3% | 높음7.8 | 2022-05-03 |
| CVE-2021-22005 랜섬웨어 악용 | 2021-11-03 | vCenter Server | VMware vCenter Server File Upload Vulnerability | 100.0% | 심각9.8 | 2021-11-17 |
| CVE-2020-3952 | 2021-11-03 | vCenter Server | VMware vCenter Server Information Disclosure Vulnerability | 90.4% | 심각9.8 | 2022-05-03 |