CVE-2020-3976: VMware Cloud Foundation

Medium severity, CVSS 5.3. EPSS: 2.1% chance of exploitation in the next 30 days.

VMware ESXi and vCenter Server contain a partial denial of service vulnerability in their respective authentication services. VMware has evaluated the severity of this issue to be in the Moderate severity range with a maximum CVSSv3 base score of 5.3.

Affected products

• VMware Cloud Foundation: from 3.0, before 3.10 (fixed in 3.10); from 4.0, before 4.0.1 (fixed in 4.0.1)
• VMware ESXi: version 6.5 only; version 6.7 only; version 7.0 only
• VMware vCenter Server: version 6.5 only; version 6.7 only; version 7.0 only

Published 2020-08-21. Last modified 2026-06-17.