VMware: known exploited vulnerabilities
Generated from CISA's catalogue of known exploited vulnerabilities as of 3 November 2026.
From CISA's catalogue, 17 entries in VMware that Vardion has a check for. The newest first.
| CVE | Product | Since | |
|---|---|---|---|
| CVE-2023-34048 | VMware vCenter Server | ||
| CVE-2023-20887 | VMware Aria Operations for Networks | ||
| CVE-2022-22963 | VMware Tanzu Spring Cloud | ||
| CVE-2022-22947 | VMware Spring Cloud Gateway | ||
| CVE-2022-22954 | VMware Workspace ONE Access and Identity Manager | Ransomware | |
| CVE-2022-22965 | VMware Spring Framework | ||
| CVE-2020-5410 | VMware Tanzu Spring Cloud Configuration (Config) Server | ||
| CVE-2018-6961 | VMware SD-WAN Edge | ||
| CVE-2018-1273 | VMware Tanzu Spring Data Commons | Ransomware | |
| CVE-2021-21973 | VMware vCenter Server and Cloud Foundation | ||
| CVE-2021-21975 | VMware vRealize Operations Manager API | Ransomware | |
| CVE-2021-22017 | VMware vCenter Server | ||
| CVE-2021-22005 | VMware vCenter Server | Ransomware | |
| CVE-2021-21985 | VMware vCenter Server | Ransomware | |
| CVE-2021-21972 | VMware vCenter Server | Ransomware | |
| CVE-2020-3952 | VMware vCenter Server | ||
| CVE-2019-5544 | VMware VMware ESXi and Horizon DaaS | Ransomware |
Know before an attacker does
Vardion scans the servers and websites you approve on the schedule you set. A known exploited vulnerability it finds goes to the top of the fix list.