VMware Server vulnerabilities

9 CVEs affecting VMware Server, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2008-4916, published 2009-04-06.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2008-3697, published 2008-09-03. Medium severity, CVSS 5.0. EPSS: 3% chance of exploitation in the next 30 days. An unspecified ISAPI extension in VMware Server before 1.0.7 build 108231 allows remote attackers to cause a denial of service (IIS crash) via a malformed request.
CVE-2008-1364, published 2008-03-20. High severity, CVSS 7.8. EPSS: 2% chance of exploitation in the next 30 days. Unspecified vulnerability in the DHCP service in VMware Workstation 5.5.x before 5.5.6, VMware Player 1.0.x before 1.0.6, VMware ACE 1.0.x before 1.0.5, VMware Server 1.0.x before 1.0.5, and VMware…
CVE-2008-1340, published 2008-03-20. High severity, CVSS 7.1. EPSS: 1.7% chance of exploitation in the next 30 days. Virtual Machine Communication Interface (VMCI) in VMware Workstation 6.0.x before 6.0.3, VMware Player 2.0.x before 2.0.3, and VMware ACE 2.0.x before 2.0.1 allows attackers to cause a denial of…
CVE-2007-5671, published 2008-06-05. Medium severity, CVSS 4.4. EPSS: 0.4% chance of exploitation in the next 30 days. HGFS.sys in the VMware Tools package in VMware Workstation 5.x before 5.5.6 build 80404, VMware Player before 1.0.6 build 80404, VMware ACE before 1.0.5 build 79846, VMware Server before 1.0.5 build…
CVE-2007-5438, published 2007-10-13. Low severity, CVSS 1.9. EPSS: 0.4% chance of exploitation in the next 30 days. Unspecified vulnerability in a certain ActiveX control in Reconfig.DLL in VMware Workstation 5.5.x before 5.5.8 build 108000, VMware Workstation 6.0.x before 6.0.5 build 109488, VMware Player 1.x…
CVE-2008-1362, published 2008-03-20. High severity, CVSS 7.2. EPSS: 0.4% chance of exploitation in the next 30 days. VMware Workstation 6.0.x before 6.0.3 and 5.5.x before 5.5.6, VMware Player 2.0.x before 2.0.3 and 1.0.x before 1.0.6, VMware ACE 2.0.x before 2.0.1 and 1.0.x before 1.0.5, and VMware Server 1.0.x…
CVE-2008-0967, published 2008-06-05. Medium severity, CVSS 6.9. EPSS: 0.4% chance of exploitation in the next 30 days. Untrusted search path vulnerability in vmware-authd in VMware Workstation 5.x before 5.5.7 build 91707 and 6.x before 6.0.4 build 93057, VMware Player 1.x before 1.0.7 build 91707 and 2.x before…
CVE-2008-1361, published 2008-03-20. Medium severity, CVSS 6.8. EPSS: 0.3% chance of exploitation in the next 30 days. VMware Workstation 6.0.x before 6.0.3 and 5.5.x before 5.5.6, VMware Player 2.0.x before 2.0.3 and 1.0.x before 1.0.6, VMware ACE 2.0.x before 2.0.1 and 1.0.x before 1.0.5, and VMware Server 1.0.x…
CVE-2008-4916, published 2009-04-06. Medium severity, CVSS 4.6. EPSS: 0.3% chance of exploitation in the next 30 days. Unspecified vulnerability in a guest virtual device driver in VMware Workstation before 5.5.9 build 126128, and 6.5.1 and earlier 6.x versions; VMware Player before 1.0.9 build 126128, and 2.5.1 and…