Vmware Esx vulnerabilities

86 known vulnerabilities affecting vmware/esx.

Total CVEs

86

CISA KEV

2

actively exploited

Public exploits

13

Exploited in wild

3

Severity breakdown

CRITICAL13HIGH32MEDIUM36LOW5

Vulnerabilities

Page 5 of 5

CVE-2005-3618HIGHCVSS 7.6≥ 2.0.1, < 2.0.2≥ 2.1.1, < 2.1.3+1 more2005-12-31

CVE-2005-3618 [HIGH] CVE-2005-3618: Cross-site request forgery (CSRF) vulnerability in the management interface for VMware ESX Server 2. Cross-site request forgery (CSRF) vulnerability in the management interface for VMware ESX Server 2.0.x before 2.0.2 patch 1, 2.1.x before 2.1.3 patch 1, and 2.x before 2.5.3 patch 2 allows allows remote attackers to perform unauthorized actions as the administrator via URLs, as demonstrated using the setUsr operation to change a password. NOTE: this issue can

CVE-2005-4773MEDIUMCVSS 4.9≤ 2.5.2v1.5.2+5 more2005-12-31

CVE-2005-4773 [MEDIUM] CVE-2005-4773: The configuration of VMware ESX Server 2.x, 2.0.x, 2.1.x, and 2.5.x allows local users to cause a de The configuration of VMware ESX Server 2.x, 2.0.x, 2.1.x, and 2.5.x allows local users to cause a denial of service (shutdown) via the (1) halt, (2) poweroff, and (3) reboot scripts executed at the service console.

CVE-2005-3619MEDIUMCVSS 6.8v2.0v2.0.1+4 more2005-12-31

CVE-2005-3619 [MEDIUM] CVE-2005-3619: Cross-site scripting (XSS) vulnerability in the management interface for VMware ESX 2.5.x before 2.5 Cross-site scripting (XSS) vulnerability in the management interface for VMware ESX 2.5.x before 2.5.2 upgrade patch 2, 2.1.x before 2.1.2 upgrade patch 6, and 2.0.x before 2.0.1 upgrade patch 6 allows remote attackers to inject arbitrary web script or HTML via messages that are not sanitized when viewing syslog log files.

CVE-2005-3620LOWCVSS 2.1≥ 2.0.1, < 2.0.2≥ 2.1.1, < 2.1.3+1 more2005-12-31

CVE-2005-3620 [LOW] CVE-2005-3620: The management interface for VMware ESX Server 2.0.x before 2.0.2 patch 1, 2.1.x before 2.1.3 patch The management interface for VMware ESX Server 2.0.x before 2.0.2 patch 1, 2.1.x before 2.1.3 patch 1, and 2.x before 2.5.3 patch 2 records passwords in cleartext in URLs that are stored in world-readable web server log files, which allows local users to gain privileges.

CVE-2005-4583MEDIUMCVSS 4.3v2.0v2.0.1+4 more2005-12-29

CVE-2005-4583 [MEDIUM] CWE-79 CVE-2005-4583: Unspecified vulnerability in the Management Interface in VMware ESX Server 2.x up to 2.5.x before 24 Unspecified vulnerability in the Management Interface in VMware ESX Server 2.x up to 2.5.x before 24 December 2005 allows "remote code execution in the Web browser" via unspecified attack vectors, probably related to cross-site scripting (XSS).

CVE-2003-1291HIGHCVSS 7.2v1.5.22003-12-31

CVE-2003-1291 [HIGH] CVE-2003-1291: VMware ESX Server 1.5.2 before Patch 4 allows local users to execute arbitrary programs as root via VMware ESX Server 1.5.2 before Patch 4 allows local users to execute arbitrary programs as root via certain modified VMware ESX Server environment variables.

← Previous5 / 5