Approved changes feed: RSS · Atom

cpe:2.3:a:n/a:vmware_vcenter_server:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorN/A (22f567d3-1203-528c-8f0e-3eb9c2f6ca78)
ProductVmware Vcenter Server (b5055793-38ea-5423-aa09-ab9c928bf1ba)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-38813 vulnerable 2026-06-08 06:41:48.194689 Privilege escalation vulnerability
HIGH (7.5)
The vCenter Server contains a privilege escalation vulnerability. A malicious actor with network access to vCenter Server may trigger this vulnerability to escalate privileges to root by sending a specially crafted network packet.
Published: 2024-09-17T17:13:13.924Z
Updated: 2025-10-21T22:55:44.624Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-38812 vulnerable 2026-06-08 06:41:48.153819 Heap-overflow vulnerability
CRITICAL (9.8)
The vCenter Server contains a heap-overflow vulnerability in the implementation of the DCERPC protocol. A malicious actor with network access to vCenter Server may trigger this vulnerability by sending a specially crafted network packet potentially leading to remote code execution.
Published: 2024-09-17T17:13:09.778Z
Updated: 2025-10-21T22:55:44.777Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-37081 vulnerable 2026-06-08 06:39:46.477591 Details available
HIGH (7.8)
The vCenter Server contains multiple local privilege escalation vulnerabilities due to misconfiguration of sudo. An authenticated local user with non-administrative privileges may exploit these issues to elevate privileges to root on vCenter Server Appliance.
Published: 2024-06-18T05:43:20.580Z
Updated: 2026-11-04T00:00:08.731Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-37080 vulnerable 2026-06-08 06:39:46.474183 Details available
CRITICAL (9.8)
vCenter Server contains a heap-overflow vulnerability in the implementation of the DCERPC protocol. A malicious actor with network access to vCenter Server may trigger this vulnerability by sending a specially crafted network packet potentially leading to remote code execution.
Published: 2024-06-18T05:43:10.901Z
Updated: 2026-01-24T04:55:13.644Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-37079 vulnerable 2026-06-08 06:39:46.429030 Details available
CRITICAL (9.8)
vCenter Server contains a heap-overflow vulnerability in the implementation of the DCERPC protocol. A malicious actor with network access to vCenter Server may trigger this vulnerability by sending a specially crafted network packet potentially leading to remote code execution.
Published: 2024-06-18T05:43:06.619Z
Updated: 2026-01-24T04:55:16.029Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-22275 vulnerable 2026-06-08 06:29:34.397896 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-22274 vulnerable 2026-06-08 06:29:34.350923 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-31680 vulnerable 2026-06-08 05:44:41.161097 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-22982 vulnerable 2026-06-08 05:40:55.872901 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-22013 vulnerable 2026-06-08 05:29:59.622946 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-22012 vulnerable 2026-06-08 05:29:59.622452 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-21973 vulnerable 2026-06-08 05:29:59.217709 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-21972 vulnerable 2026-06-08 05:29:59.185581 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-3952 vulnerable 2026-06-08 05:25:57.966173 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.