GCVE - cpe:2.3:a:vmware:esx_server:3.5:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:vmware:esx_server:3.5:*:*:*:*:*:*:*

part: a version: 3.5 update: *

Vendor	Vmware (`7bb62c7c-2241-5a0b-8dbc-5f13251fb24e`)
Product	Esx Server (`4c0b37b2-2b4a-5e95-9541-30e74ead6900`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2010-1137`	vulnerable	2026-06-08 04:54:05.394927	Details available Cross-site scripting (XSS) vulnerability in WebAccess in VMware VirtualCenter 2.0.2 and 2.5 and VMware ESX 3.0.3 and 3.5, and the Server Console in VMware Server 1.0, allows remote attackers to inject arbitrary web script or HTML via the name of a virtual machine. Published: 2010-04-01T19:00:00.000Z Updated: 2024-08-07T01:14:05.797Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/39037 http://security.gentoo.org/glsa/glsa-201209-25.xml https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6863 http://lists.vmware.com/pipermail/security-announce/2010/000086.html http://www.vmware.com/security/advisories/VMSA-2010-0005.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2010-0686`	vulnerable	2026-06-08 04:52:03.999445	Details available WebAccess in VMware VirtualCenter 2.0.2 and 2.5, VMware Server 2.0, and VMware ESX 3.0.3 and 3.5 allows remote attackers to leverage proxy-server functionality to spoof the origin of requests via unspecified vectors, related to a "URL forwarding vulnerability." Published: 2010-04-01T19:00:00.000Z Updated: 2024-08-07T00:59:38.333Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/39037 http://lists.vmware.com/pipermail/security-announce/2010/000086.html http://www.vmware.com/security/advisories/VMSA-2010-0005.html http://www.securitytracker.com/id?1023769	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2009-2277`	vulnerable	2026-06-08 04:51:27.475573	Details available Cross-site scripting (XSS) vulnerability in WebAccess in VMware VirtualCenter 2.0.2 and 2.5 and VMware ESX 3.0.3 and 3.5 allows remote attackers to inject arbitrary web script or HTML via vectors related to "context data." Published: 2010-04-01T19:00:00.000Z Updated: 2024-08-07T05:44:55.874Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/39037 http://lists.vmware.com/pipermail/security-announce/2010/000086.html http://www.vmware.com/security/advisories/VMSA-2010-0005.html https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7080	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2008-2100`	vulnerable	2026-06-08 04:50:22.927824	Details available Multiple buffer overflows in VIX API 1.1.x before 1.1.4 build 93057 on VMware Workstation 5.x and 6.x, VMware Player 1.x and 2.x, VMware ACE 2.x, VMware Server 1.x, VMware Fusion 1.x, VMware ESXi 3.5, and VMware ESX 3.0.1 through 3.5 allow guest OS users to execute arbitrary code on the host OS via unspecified vectors. Published: 2008-06-05T20:21:00.000Z Updated: 2024-08-07T08:49:57.520Z Open on db.gcve.eu Reference links http://security.gentoo.org/glsa/glsa-201209-25.xml http://www.vupen.com/english/advisories/2008/1744 http://securitytracker.com/id?1020200 https://exchange.xforce.ibmcloud.com/vulnerabilities/42872 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5647	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2008-0967`	vulnerable	2026-06-08 04:50:18.479310	Details available Untrusted search path vulnerability in vmware-authd in VMware Workstation 5.x before 5.5.7 build 91707 and 6.x before 6.0.4 build 93057, VMware Player 1.x before 1.0.7 build 91707 and 2.x before 2.0.4 build 93057, and VMware Server before 1.0.6 build 91891 on Linux, and VMware ESXi 3.5 and VMware ESX 2.5.4 through 3.5, allows local users to gain privileges via a library path option in a configuration file. Published: 2008-06-05T20:21:00.000Z Updated: 2024-08-07T08:01:40.101Z Open on db.gcve.eu Reference links http://security.gentoo.org/glsa/glsa-201209-25.xml http://www.vupen.com/english/advisories/2008/1744 http://www.vmware.com/security/advisories/VMSA-2008-0009.html http://www.securityfocus.com/bid/29557 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4768	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.