VMware Avi Load Balancer vulnerabilities

2 CVEs affecting VMware Avi Load Balancer, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2024-22266, published 2024-05-08.

More from VMware.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2024-22264, published 2024-05-08. High severity, CVSS 7.2. EPSS: 0.6% chance of exploitation in the next 30 days. VMware Avi Load Balancer contains a privilege escalation vulnerability. A malicious actor with admin privileges on VMware Avi Load Balancer can create, modify, execute and delete files as a root user…
• CVE-2024-22266, published 2024-05-08. Medium severity, CVSS 6.5. EPSS: 0.4% chance of exploitation in the next 30 days.  VMware Avi Load Balancer contains an information disclosure vulnerability. A malicious actor with access to the system logs can view cloud connection credentials in plaintext.