VMware Esx Server vulnerabilities

8 CVEs affecting VMware Esx Server, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2010-1137, published 2010-04-01.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2009-3731, published 2009-12-16. Medium severity, CVSS 4.3. EPSS: 2.8% chance of exploitation in the next 30 days. Multiple cross-site scripting (XSS) vulnerabilities in WebWorks Help 2.0 through 5.0 in VMware vCenter 4.0 before Update 1 Build 208156; VMware Server 2.0.2; VMware ESX 4.0; VMware Lab Manager 2.x;…
CVE-2007-1270, published 2007-04-06. Medium severity, CVSS 5.0. EPSS: 2.6% chance of exploitation in the next 30 days. Double free vulnerability in VMware ESX Server 3.0.0 and 3.0.1 allows attackers to cause a denial of service (crash), obtain sensitive information, or possibly execute arbitrary code via unspecified…
CVE-2010-1137, published 2010-04-01. Medium severity, CVSS 4.3. EPSS: 2.4% chance of exploitation in the next 30 days. Cross-site scripting (XSS) vulnerability in WebAccess in VMware VirtualCenter 2.0.2 and 2.5 and VMware ESX 3.0.3 and 3.5, and the Server Console in VMware Server 1.0, allows remote attackers to…
CVE-2010-0686, published 2010-04-01. High severity, CVSS 7.5. EPSS: 2.2% chance of exploitation in the next 30 days. WebAccess in VMware VirtualCenter 2.0.2 and 2.5, VMware Server 2.0, and VMware ESX 3.0.3 and 3.5 allows remote attackers to leverage proxy-server functionality to spoof the origin of requests via…
CVE-2009-2277, published 2010-04-01. Medium severity, CVSS 4.3. EPSS: 1.7% chance of exploitation in the next 30 days. Cross-site scripting (XSS) vulnerability in WebAccess in VMware VirtualCenter 2.0.2 and 2.5 and VMware ESX 3.0.3 and 3.5 allows remote attackers to inject arbitrary web script or HTML via vectors…
CVE-2008-2100, published 2008-06-05. High severity, CVSS 7.2. EPSS: 0.6% chance of exploitation in the next 30 days. Multiple buffer overflows in VIX API 1.1.x before 1.1.4 build 93057 on VMware Workstation 5.x and 6.x, VMware Player 1.x and 2.x, VMware ACE 2.x, VMware Server 1.x, VMware Fusion 1.x, VMware ESXi…
CVE-2007-5671, published 2008-06-05. Medium severity, CVSS 4.4. EPSS: 0.4% chance of exploitation in the next 30 days. HGFS.sys in the VMware Tools package in VMware Workstation 5.x before 5.5.6 build 80404, VMware Player before 1.0.6 build 80404, VMware ACE before 1.0.5 build 79846, VMware Server before 1.0.5 build…
CVE-2008-0967, published 2008-06-05. Medium severity, CVSS 6.9. EPSS: 0.4% chance of exploitation in the next 30 days. Untrusted search path vulnerability in vmware-authd in VMware Workstation 5.x before 5.5.7 build 91707 and 6.x before 6.0.4 build 93057, VMware Player 1.x before 1.0.7 build 91707 and 2.x before…