VMware ESXi vulnerabilities

2 CVEs affecting VMware ESXi, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2009-0518, published 2009-04-06.

More from VMware.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2008-4916, published 2009-04-06. Medium severity, CVSS 4.6. EPSS: 0.3% chance of exploitation in the next 30 days. Unspecified vulnerability in a guest virtual device driver in VMware Workstation before 5.5.9 build 126128, and 6.5.1 and earlier 6.x versions; VMware Player before 1.0.9 build 126128, and 2.5.1 and…
• CVE-2009-0518, published 2009-04-06. Low severity, CVSS 2.1. EPSS: 0.3% chance of exploitation in the next 30 days. VI Client in VMware VirtualCenter before 2.5 Update 4, VMware ESXi 3.5 before Update 4, and VMware ESX 3.5 before Update 4 retains the VirtualCenter Server password in process memory, which might…