VMware App Volumes vulnerabilities

2 CVEs affecting VMware App Volumes, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2021-21999, published 2021-06-23.

More from VMware.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2021-21999, published 2021-06-23. High severity, CVSS 7.8. EPSS: 1.5% chance of exploitation in the next 30 days. VMware Tools for Windows (11.x.y prior to 11.2.6), VMware Remote Console for Windows (12.x prior to 12.0.1) , VMware App Volumes (2.x prior to 2.18.10 and 4 prior to 2103) contain a local privilege…
• CVE-2020-3975, published 2020-08-21. Medium severity, CVSS 5.4. EPSS: 0.5% chance of exploitation in the next 30 days. VMware App Volumes 2.x prior to 2.18.6 and VMware App Volumes 4 prior to 2006 contain a Stored Cross-Site Scripting (XSS) vulnerability. A malicious actor with access to create and edit applications…