Vulnerability intelligence
VULONE Vulnerability Database
Stay ahead of what gets exploited. Every CVE from NVD, enriched every 30 minutes with EPSS, CISA KEV, ransomware linkage and automated analysis.
401,046CVE records
2,580Published, last 7 days
1,733In CISA KEV
1,444Critical, last 30 days
5,599Analysed
07:16 UTCLast NVD sync
Filters Show:
65 results. Vmware Cloud Foundation.
Page 1 of 4| ID | Severity | Score | Technology | Weakness | CISA KEV | Exploit | EPSS | Published |
|---|---|---|---|---|---|---|---|---|
| CVE-2026-41723 | High | 8.0 |  Vmware Aria Operations +3 | Cross-site scripting | - | - | 0.42% | Jun 8, 2026 |
| CVE-2026-22721 | High | 7.2 | Vmware Aria Operations +3 | Improper privilege management | - | - | 0.71% | Feb 25, 2026 |
| CVE-2026-22719 | High | 8.1 | Vmware Aria Operations +3 | Command injection | Listed | Confirmed | 18% | Feb 25, 2026 |
| CVE-2025-41244 | High | 7.8 | Vmware Aria Operations +7 | CWE-267 | Listed | Confirmed | 8.4% | Sep 29, 2025 |
| CVE-2025-22243 | High | 7.5 |  Broadcom Vmware Nsx +3 | Cross-site scripting | - | - | 0.34% | Jun 4, 2025 |
| CVE-2025-41231 | High | 7.3 | Vmware Cloud Foundation | Missing authorization | - | - | 0.17% | May 20, 2025 |
| CVE-2025-22249 | High | 8.2 | Vmware Aria Automation +2 | Cross-site scripting | - | - | 0.34% | May 13, 2025 |
| CVE-2025-22225 | High | 8.2 | Vmware Esxi +3 | Out-of-bounds write | Listed · RW | Confirmed | 1.0% | Mar 4, 2025 |
| CVE-2025-22224 | High | 8.2 | Vmware Esxi +4 | TOCTOU race condition | Listed | Confirmed | 1.6% | Mar 4, 2025 |
| CVE-2025-22218 | High | 7.7 | Vmware Aria Operations For Logs +1 | Error message information leak | - | - | 0.68% | Jan 30, 2025 |
| CVE-2024-38831 | High | 7.8 | Vmware Aria Operations +1 | Command injection | - | - | 0.29% | Nov 26, 2024 |
| CVE-2024-38830 | High | 7.8 | Vmware Aria Operations +1 | Improper privilege management | - | - | 0.18% | Nov 26, 2024 |
| CVE-2024-22280 | High | 8.1 | Vmware Aria Automation +1 | SQL injection | - | - | 0.47% | Jul 11, 2024 |
| CVE-2024-37085 | High | 7.2 | Vmware Cloud Foundation +1 | Improper authentication | Listed · RW | Confirmed | 27% | Jun 25, 2024 |
| CVE-2024-37081 | High | 7.8 | Vmware Vcenter Server +1 | CWE-556 | - | - | 5.0% | Jun 18, 2024 |
| CVE-2024-22274 | High | 7.2 | Vmware Cloud Foundation +1 | Code injection | - | - | 2.5% | May 21, 2024 |
| CVE-2024-22273 | High | 7.8 | Vmware Cloud Foundation +3 | Out-of-bounds read | - | - | 0.17% | May 21, 2024 |
| CVE-2024-22255 | High | 7.1 | Vmware Cloud Foundation +3 | Allocation without limits | - | - | 2.3% | Mar 5, 2024 |
| CVE-2024-22254 | High | 8.2 | Vmware Cloud Foundation +1 | Out-of-bounds write | - | - | 0.50% | Mar 5, 2024 |
| CVE-2023-34063 | High | 8.3 | Vmware Aria Automation +1 | Missing authorization | - | - | 0.95% | Jan 16, 2024 |
