Approved changes feed: RSS · Atom

cpe:2.3:a:vmware:vcenter_server:8.0:c:*:*:*:*:*:*

part: a version: 8.0 update: c

VendorVmware (7bb62c7c-2241-5a0b-8dbc-5f13251fb24e)
ProductVcenter Server (07ee07f5-6760-56ae-89f5-9d9572de30b1)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-38813 vulnerable 2026-06-08 06:41:48.196833 Privilege escalation vulnerability
HIGH (7.5)
The vCenter Server contains a privilege escalation vulnerability. A malicious actor with network access to vCenter Server may trigger this vulnerability to escalate privileges to root by sending a specially crafted network packet.
Published: 2024-09-17T17:13:13.924Z
Updated: 2025-10-21T22:55:44.624Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-38812 vulnerable 2026-06-08 06:41:48.193018 Heap-overflow vulnerability
CRITICAL (9.8)
The vCenter Server contains a heap-overflow vulnerability in the implementation of the DCERPC protocol. A malicious actor with network access to vCenter Server may trigger this vulnerability by sending a specially crafted network packet potentially leading to remote code execution.
Published: 2024-09-17T17:13:09.778Z
Updated: 2025-10-21T22:55:44.777Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-37087 vulnerable 2026-06-08 06:39:46.556728 Details available
MEDIUM (5.3)
The vCenter Server contains a denial-of-service vulnerability. A malicious actor with network access to vCenter Server may create a denial-of-service condition.
Published: 2024-06-25T14:16:13.273Z
Updated: 2024-10-31T13:19:28.741Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-37081 vulnerable 2026-06-08 06:39:46.477920 Details available
HIGH (7.8)
The vCenter Server contains multiple local privilege escalation vulnerabilities due to misconfiguration of sudo. An authenticated local user with non-administrative privileges may exploit these issues to elevate privileges to root on vCenter Server Appliance.
Published: 2024-06-18T05:43:20.580Z
Updated: 2024-08-02T03:43:50.934Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-37080 vulnerable 2026-06-08 06:39:46.474512 Details available
CRITICAL (9.8)
vCenter Server contains a heap-overflow vulnerability in the implementation of the DCERPC protocol. A malicious actor with network access to vCenter Server may trigger this vulnerability by sending a specially crafted network packet potentially leading to remote code execution.
Published: 2024-06-18T05:43:10.901Z
Updated: 2026-01-24T04:55:13.644Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-37079 vulnerable 2026-06-08 06:39:46.437576 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-22275 vulnerable 2026-06-08 06:29:34.401039 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-22274 vulnerable 2026-06-08 06:29:34.381162 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-34056 vulnerable 2026-06-08 06:06:24.335243 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-34048 vulnerable 2026-06-08 06:06:24.312765 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-20896 vulnerable 2026-06-08 05:54:18.092964 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-20895 vulnerable 2026-06-08 05:54:18.091738 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-20894 vulnerable 2026-06-08 05:54:18.090401 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-20893 vulnerable 2026-06-08 05:54:18.089154 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-20892 vulnerable 2026-06-08 05:54:18.086892 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.