Vmware Vsphere vulnerabilities
3 known vulnerabilities affecting vmware/vsphere.
Total CVEs
3
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
HIGH1MEDIUM2
Vulnerabilities
Page 1 of 1
CVE-2026-41723P3HIGHCVSS 8.0≥ 9.0, < 9.0.2.0v9.12026-06-08
CVE-2026-41723 [HIGH] CVE-2026-41723: VMware Cloud Foundation Operations contains multiple stored cross-site scripting vulnerabilities.A m
VMware Cloud Foundation Operations contains multiple stored cross-site scripting vulnerabilities.A malicious actor with privileges to create policies, views or text-widgets may be able to inject scripts to perform administrative actions in VMware Cloud Foundation Operations.
nvd
CVE-2026-41722P4MEDIUMCVSS 5.4≥ 9.0, < 9.0.2.0v9.12026-06-08
CVE-2026-41722 [MEDIUM] CWE-79 CVE-2026-41722: VMware Cloud Foundation Operations contains multiple stored cross-site scripting vulnerabilities.A m
VMware Cloud Foundation Operations contains multiple stored cross-site scripting vulnerabilities.A malicious actor with privileges to create policies, views or text-widgets may be able to inject scripts to perform administrative actions in VMware Cloud Foundation Operations.
nvd
CVE-2012-1512P4MEDIUMCVSS 4.3≤ 4.1≤ 5.02012-03-16
CVE-2012-1512 [MEDIUM] CWE-79 CVE-2012-1512: Cross-site scripting (XSS) vulnerability in the internal browser in vSphere Client in VMware vSphere
Cross-site scripting (XSS) vulnerability in the internal browser in vSphere Client in VMware vSphere 4.1 before Update 2 and 5.0 before Update 1 allows remote attackers to inject arbitrary web script or HTML via a crafted log-file entry.
nvd