vmware vcenter server appliance

Name: vmware vcenter server appliance
Brand: vmware

productUS

cpe:2.3:a:vmware:vcenter_server_appliance:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

by severity

2critical5high7medium0low

updated 2026-10-27

vulnerabilities (14)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2014-6271US	critical9.8OT critical	100.0% (100th)	KEV	no fix	2014-09-24	3 versions
CVE-2014-7169US	critical9.8OT critical	99.9% (100th)	KEV	no fix	2014-09-25	3 versions
CVE-2014-4241US	medium4.3	3.84% (90th)	—	no fix	2014-07-17	= 5.1
CVE-2014-4258US	medium6.5	3.51% (89th)	—	no fix	2014-07-17	3 versions
CVE-2013-3080US	high9.0	2.47% (84th)	—	no fix	2013-05-01	= 5.1
CVE-2014-3790US	high9.0	2.35% (84th)	—	no fix	2014-06-01	2 versions
CVE-2013-3107US	medium4.3	1.98% (80th)	—	no fix	2013-05-01	= 5.0
CVE-2013-1659US	high7.6	1.82% (79th)	—	no fix	2013-02-22	2 versions
CVE-2014-3797US	medium4.3	1.80% (78th)	—	no fix	2014-12-08	= 5.1
CVE-2013-3079US	high9.0	1.74% (78th)	—	no fix	2013-05-01	= 5.1
CVE-2012-6324US	medium4.0	1.46% (73rd)	—	no fix	2012-12-21	2 versions
CVE-2012-6326US	high7.8	1.33% (71st)	—	no fix	2013-02-22	= 5.0
CVE-2012-6325US	medium4.0	0.95% (61st)	—	no fix	2012-12-21	2 versions
CVE-2014-8371US	medium4.3	0.59% (48th)	—	no fix	2014-12-08	3 versions

The flaw types (CWEs) most of these CVEs share.

CWE-264CWE-2643 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor2 CVEs
CWE-78Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')2 CVEs
CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer1 CVEs
CWE-20Improper Input Validation1 CVEs
CWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')1 CVEs
CWE-310CWE-3101 CVEs
CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')1 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.