Broadcom Inc. VMware Cloud Foundation

Name: Broadcom Inc. VMware Cloud Foundation
Brand: Broadcom Inc.

productRU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

by severity

27critical61high47medium2low

updated 2026-10-25

vulnerabilities (173)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2021-22005US	critical9.8OT critical	100.0% (100th)	KEV	no fix	2021-09-23	2 versions
CVE-2021-21985US	critical9.8OT critical	100.0% (100th)	KEV	no fix	2021-05-26	2 versions
CVE-2022-22954US	critical9.8OT critical	100.0% (100th)	KEV	no fix	2022-04-11	4.0 → 4.3.1.1
CVE-2021-21972US	critical9.8OT critical	99.9% (100th)	KEV	no fix	2021-02-24	2 versions
CVE-2021-39144US	high8.5OT critical	98.1% (100th)	KEV	no fix	2021-08-23	≤ KB 89809
CVE-2021-21973US	medium5.3OT critical	88.0% (100th)	KEV	no fix	2021-02-24	2 versions
CVE-2020-3992US	critical9.8OT critical	83.0% (100th)	KEV	no fix	2020-10-20	2 versions
CVE-2021-21975US	high7.5OT critical	78.0% (100th)	KEV	no fix	2021-03-31	≤ KB83260
CVE-2022-22960US	high7.8OT critical	35.5% (98th)	KEV	no fix	2022-04-13	≤ KB88099
CVE-2024-37085US	high7.2OT critical	26.8% (98th)	KEV	no fix	2024-06-25	2 versions
CVE-2022-22948US	medium6.5OT critical	13.3% (96th)	KEV	no fix	2022-03-29	2 versions
CVE-2025-41244US	—OT critical	8.63% (95th)	KEV	no fix	2025-09-29	2 versions
CVE-2026-59310US	—OT critical	2.56% (85th)	KEV	no fix	2026-07-30	3 versions
CVE-2023-34048US	critical9.8OT critical	99.4% (100th)	KEV	no fix	2023-10-25	≤ KB88287
CVE-2024-38812US	critical9.8OT critical	54.6% (99th)	KEV	no fix	2024-09-17	2 versions
CVE-2021-22017US	medium5.3OT critical	49.2% (99th)	KEV	no fix	2021-09-23	3.0 → 3.10.2.2
CVE-2024-37079US	critical9.8OT critical	22.4% (98th)	KEV	no fix	2024-06-18	≤ KB88287
CVE-2026-22719US	—OT critical	18.3% (97th)	KEV	no fix	2026-02-25	2 versions
CVE-2024-38813US	critical9.8OT critical	17.4% (97th)	KEV	no fix	2024-09-17	2 versions
CVE-2020-4006US	critical9.1OT critical	17.3% (97th)	KEV	no fix	2020-11-23	≤ 4.0
CVE-2025-22226US	medium6.0OT critical	1.77% (78th)	KEV	no fix	2025-03-04	2 versions
CVE-2025-22224US	high8.2OT critical	1.56% (75th)	KEV	no fix	2025-03-04	2 versions
CVE-2025-22225US	high8.2OT critical	1.02% (63rd)	KEV	no fix	2025-03-04	2 versions
CVE-2022-31706US	critical9.8	87.1% (100th)	Exploit	no fix	2023-01-26	≤ KB90668
CVE-2022-31704US	critical9.8	81.0% (100th)	Exploit	no fix	2023-01-26	≤ KB90668
CVE-2021-21983US	medium6.5	68.8% (99th)	Exploit	no fix	2021-03-31	≤ KB83260
CVE-2022-22972US	critical9.8	56.3% (99th)	Exploit	no fix	2022-05-20	≤ KB88438
CVE-2023-34051US	critical9.8OT high	48.8% (99th)	Exploit	no fix	2023-10-20	≤ KB95212
CVE-2021-21974US	high8.8	45.1% (99th)	Exploit	no fix	2021-02-24	4.0 → 4.2
CVE-2022-31711US	medium5.3	24.0% (98th)	Exploit	no fix	2023-01-26	≤ KB90668
CVE-2022-22957US	high7.2	23.3% (98th)	Exploit	no fix	2022-04-13	2 versions
CVE-2021-22006US	high7.5	6.61% (94th)	Exploit	no fix	2021-09-23	2 versions
CVE-2024-37081US	—	4.99% (92nd)	Exploit	no fix	2024-06-18	2 versions
CVE-2021-21980US	high7.5	4.67% (92nd)	Exploit	no fix	2021-11-24	3.0 → 4.0
CVE-2024-22274US	—	2.51% (85th)	Exploit	no fix	2024-05-21	2 versions
CVE-2021-22015US	high7.8	1.94% (80th)	Exploit	no fix	2021-09-23	2 versions
CVE-2021-21994US	critical9.8	1.17% (67th)	Exploit	no fix	2021-07-13	2 versions
CVE-2022-31660US	high7.8	1.15% (67th)	Exploit	no fix	2022-08-05	≤ KB89096
CVE-2022-31705US	high8.2	1.13% (66th)	Exploit	no fix	2022-12-14	2 versions
CVE-2024-22275US	—	0.99% (62nd)	Exploit	no fix	2024-05-21	2 versions
CVE-2025-41228US	—	0.90% (59th)	Exploit	no fix	2025-05-20	2 versions
CVE-2022-31698US	medium5.3	47.8% (99th)	—	no fix	2022-12-13	2 versions
CVE-2023-20894US	critical9.8	33.9% (98th)	—	no fix	2023-06-22	2 versions
CVE-2022-31656US	critical9.8	24.7% (98th)	—	no fix	2022-08-05	4.2 → 4.4
CVE-2021-21986US	critical9.8OT elevated	13.3% (96th)	—	no fix	2021-05-26	2 versions
CVE-2024-37080US	critical9.8	12.5% (96th)	—	no fix	2024-06-18	2 versions
CVE-2021-22048US	high8.8	10.3% (96th)	—	no fix	2021-11-10	3.0 → 4.0
CVE-2022-21123US	medium5.5	6.87% (94th)	—	no fix	2022-06-15	2 versions
CVE-2022-21125US	medium5.5	6.45% (94th)	—	no fix	2022-06-15	2 versions
CVE-2021-22045US	high7.8	4.68% (92nd)	—	no fix	2022-01-04	2 versions

showing 50 of 173

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-787Out-of-bounds Write22 CVEs
CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')16 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor15 CVEs
CWE-918Server-Side Request Forgery (SSRF)15 CVEs
CWE-287Improper Authentication12 CVEs
CWE-264CWE-26410 CVEs
CWE-269Improper Privilege Management10 CVEs
CWE-400Uncontrolled Resource Consumption9 CVEs

sources (1)

Which sources assert this record, and when.

RUBDU (FSTEC Data Security Threats Database)173 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan