VMware Vsphere vulnerabilities

3 CVEs affecting VMware Vsphere, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-41723, published 2026-06-08.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2012-1512, published 2012-03-16. Medium severity, CVSS 4.3. EPSS: 1.9% chance of exploitation in the next 30 days. Cross-site scripting (XSS) vulnerability in the internal browser in vSphere Client in VMware vSphere 4.1 before Update 2 and 5.0 before Update 1 allows remote attackers to inject arbitrary web script…
CVE-2026-41723, published 2026-06-08. High severity, CVSS 8.0. EPSS: 0.4% chance of exploitation in the next 30 days. VMware Cloud Foundation Operations contains multiple stored cross-site scripting vulnerabilities.A malicious actor with privileges to create policies, views or text-widgets may be able to inject…
CVE-2026-41722, published 2026-06-08. Medium severity, CVSS 5.4. EPSS: 0.3% chance of exploitation in the next 30 days. VMware Cloud Foundation Operations contains multiple stored cross-site scripting vulnerabilities.A malicious actor with privileges to create policies, views or text-widgets may be able to inject…