VMware Studio vulnerabilities

3 CVEs affecting VMware Studio, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2010-2667, published 2010-07-22.

More from VMware.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2010-2667, published 2010-07-22. Medium severity, CVSS 6.0. EPSS: 2.1% chance of exploitation in the next 30 days. Multiple unspecified vulnerabilities in the Virtual Appliance Management Infrastructure (VAMI) in VMware Studio 2.0 allow remote authenticated users to execute arbitrary commands via vectors…
• CVE-2009-2968, published 2009-09-02. Medium severity, CVSS 5.0. EPSS: 1.8% chance of exploitation in the next 30 days. Directory traversal vulnerability in a support component in the web interface in VMware Studio 2.0 public beta before build 1017-185256 allows remote attackers to upload files to arbitrary locations…
• CVE-2010-2427, published 2010-07-22. Medium severity, CVSS 4.4. EPSS: 0.3% chance of exploitation in the next 30 days. VMware Studio 2.0 does not properly write to temporary files, which allows local users to gain privileges via unspecified vectors.