GCVE - cpe:2.3:a:vmware:vcenter_server:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:vmware:vcenter_server:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Vmware (`7bb62c7c-2241-5a0b-8dbc-5f13251fb24e`)
Product	Vcenter Server (`07ee07f5-6760-56ae-89f5-9d9572de30b1`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2025-41228`	vulnerable	2026-06-08 07:25:06.763900	VMware ESXi and vCenter Server Reflected Cross Site Scripting (XSS) Vulnerability MEDIUM (4.3) VMware ESXi and vCenter Server contain a reflected cross-site scripting vulnerability due to improper input validation. A malicious actor with network access to the login page of certain ESXi host or vCenter Server URL paths may exploit this issue to steal cookies or redirect to malicious websites. Published: 2025-05-20T14:24:34.436Z Updated: 2025-06-24T07:14:21.027Z Open on db.gcve.eu Reference links https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/25717	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-41225`	vulnerable	2026-06-08 07:25:06.750883	VMware vCenter Server authenticated command-execution vulnerability HIGH (8.8) The vCenter Server contains an authenticated command-execution vulnerability. A malicious actor with privileges to create or modify alarms and run script action may exploit this issue to run arbitrary commands on the vCenter Server. Published: 2025-05-20T14:24:17.487Z Updated: 2025-06-24T07:11:20.683Z Open on db.gcve.eu Reference links https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/25717	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-34056`	vulnerable	2026-06-08 06:06:24.333337	VMware vCenter Server Partial Information Disclosure Vulnerability MEDIUM (4.3) vCenter Server contains a partial information disclosure vulnerability. A malicious actor with non-administrative privileges to vCenter Server may leverage this issue to access unauthorized data. Published: 2023-10-25T04:24:47.707Z Updated: 2024-10-29T18:28:23.735Z Open on db.gcve.eu Reference links https://www.vmware.com/security/advisories/VMSA-2023-0023.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-34048`	vulnerable	2026-06-08 06:06:24.291813	VMware vCenter Server Out-of-Bounds Write Vulnerability CRITICAL (9.8) vCenter Server contains an out-of-bounds write vulnerability in the implementation of the DCERPC protocol. A malicious actor with network access to vCenter Server may trigger an out-of-bounds write potentially leading to remote code execution. Published: 2023-10-25T04:21:42.267Z Updated: 2025-10-21T23:05:33.739Z Open on db.gcve.eu Reference links https://www.vmware.com/security/advisories/VMSA-2023-0023.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-20896`	vulnerable	2026-06-08 05:54:18.092443	Details available MEDIUM (5.9) The VMware vCenter Server contains an out-of-bounds read vulnerability in the implementation of the DCERPC protocol. A malicious actor with network access to vCenter Server may trigger an out-of-bounds read by sending a specially crafted packet leading to denial-of-service of certain services (vmcad, vmdird, and vmafdd). Published: 2023-06-22T12:00:45.390Z Updated: 2025-02-13T16:40:09.061Z Open on db.gcve.eu Reference links https://www.vmware.com/security/advisories/VMSA-2023-0014.html https://www.talosintelligence.com/vulnerability_reports/TALOS-2023-1800	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-20895`	vulnerable	2026-06-08 05:54:18.091007	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-20894`	vulnerable	2026-06-08 05:54:18.089893	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-20893`	vulnerable	2026-06-08 05:54:18.088622	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-20892`	vulnerable	2026-06-08 05:54:18.066294	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-31680`	vulnerable	2026-06-08 05:44:41.162293	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2019-5534`	vulnerable	2026-06-08 05:13:59.736607	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2019-5532`	vulnerable	2026-06-08 05:13:59.729568	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-4927`	vulnerable	2026-06-08 05:09:38.484755	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-4926`	vulnerable	2026-06-08 05:09:38.484322	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.