vm2 project vm2

Name: vm2 project vm2
Brand: vm2 project

productUS

cpe:2.3:a:vm2_project:vm2:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

by severity

12critical2high2medium0low

updated 2026-10-23

vulnerabilities (32)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2023-30547US	critical10.0	73.0% (99th)	Exploit	no fix	2023-04-17	≤ 3.9.16
CVE-2023-29017US	critical9.8	63.2% (99th)	Exploit	3.9.15	2023-04-06	< 3.9.15
CVE-2022-36067US	critical10.0	47.9% (99th)	Exploit	3.9.11	2022-09-06	< 3.9.11
CVE-2023-32314US	critical10.0	8.13% (95th)	Exploit	3.9.18	2023-05-15	< 3.9.18
CVE-2023-37903US	critical10.0	4.21% (91st)	Exploit	no fix	2023-07-21	≤ 3.9.19
CVE-2026-24118US	—	0.91% (59th)	Exploit	3.11.0	2026-05-04	< 3.11.0
CVE-2023-37466US	critical10.0	3.87% (90th)	—	no fix	2023-07-14	≤ 3.9.19
CVE-2023-29199US	critical10.0	3.85% (90th)	—	3.9.16	2023-04-14	< 3.9.16
CVE-2021-23449US	critical10.0	3.59% (89th)	—	3.9.4	2021-10-18	< 3.9.4
CVE-2021-23555US	critical9.8	2.88% (87th)	—	3.9.6	2022-02-11	< 3.9.6
CVE-2022-25893US	critical9.8	1.54% (75th)	—	3.9.10	2022-12-21	< 3.9.10
CVE-2019-10761US	high8.3	1.33% (71st)	—	3.6.11	2022-07-13	< 3.6.11
CVE-2026-22709US	critical10.0	1.27% (70th)	—	3.10.2	2026-01-26	< 3.10.2
CVE-2026-24781US	—	1.19% (68th)	—	3.11.0	2026-05-04	< 3.11.0
CVE-2026-43999US	—OT elevated	0.97% (62nd)	—	3.11.0	2026-05-13	< 3.11.0
CVE-2026-26956US	—	0.92% (60th)	—	3.10.5	2026-05-04	< 3.10.5
CVE-2026-45411US	—	0.90% (59th)	—	3.11.3	2026-05-13	< 3.11.3
CVE-2026-44008US	—	0.90% (59th)	—	3.11.2	2026-05-13	< 3.11.2
CVE-2026-24120US	—	0.90% (59th)	—	3.10.5	2026-05-04	< 3.10.5
CVE-2026-43998US	—	0.85% (58th)	—	no fix	2026-05-13	= 3.10.5
CVE-2026-44005US	—	0.83% (57th)	—	3.11.0	2026-05-13	3.9.6 → 3.11.0
CVE-2023-32313US	medium5.3	0.79% (56th)	—	3.9.18	2023-05-15	< 3.9.18
CVE-2026-44006US	—	0.77% (55th)	—	3.11.0	2026-05-13	< 3.11.0
CVE-2026-43997US	—	0.77% (55th)	—	3.11.0	2026-05-13	< 3.11.0
CVE-2026-26332US	critical10.0	0.74% (54th)	—	3.11.0	2026-05-04	< 3.11.0
CVE-2026-44009US	—	0.71% (53rd)	—	3.11.2	2026-05-13	< 3.11.2
CVE-2026-44004US	—	0.66% (51st)	—	3.11.0	2026-05-13	< 3.11.0
CVE-2026-44001US	—	0.66% (51st)	—	3.11.0	2026-05-13	< 3.11.0
CVE-2026-44007US	—	0.61% (49th)	—	3.11.1	2026-05-13	< 3.11.1
CVE-2026-44003US	medium5.8	0.35% (28th)	—	3.11.0	2026-05-13	< 3.11.0
CVE-2026-44002US	—	0.34% (26th)	—	3.11.0	2026-05-13	< 3.11.0
CVE-2026-44000US	high7.2	0.29% (20th)	—	3.11.0	2026-05-13	< 3.11.0

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-94Improper Control of Generation of Code ('Code Injection')11 CVEs
CWE-693Protection Mechanism Failure9 CVEs
CWE-653Improper Isolation or Compartmentalization6 CVEs
CWE-668Exposure of Resource to Wrong Sphere4 CVEs
CWE-913Improper Control of Dynamically-Managed Code Resources4 CVEs
CWE-1321Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')3 CVEs
CWE-74Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')3 CVEs
CWE-1100Insufficient Isolation of System-Dependent Functions2 CVEs

sources (1)

Which sources assert this record, and when.

USNVD / CVE32 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan