VMware Infrastructure vulnerabilities

2 CVEs affecting VMware Infrastructure, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2011-2217, published 2011-06-06.

More from VMware.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2011-2217, published 2011-06-06. High severity, CVSS 9.3. EPSS: 42% chance of exploitation in the next 30 days. Certain ActiveX controls in (1) tsgetxu71ex552.dll and (2) tsgetx71ex552.dll in Tom Sawyer GET Extension Factory 5.5.2.237, as used in VI Client (aka VMware Infrastructure Client) 2.0.2 before Build…
• CVE-2006-3589, published 2006-07-21. Low severity, CVSS 3.6. EPSS: 0.4% chance of exploitation in the next 30 days. vmware-config.pl in VMware for Linux, ESX Server 2.x, and Infrastructure 3 does not check the return code from a Perl chmod function call, which might cause an SSL key file to be created with an…