GCVE - cpe:2.3:a:vmware:cloud_foundation:-:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:vmware:cloud_foundation:-:*:*:*:*:*:*:*

part: a version: - update: *

Vendor	Vmware (`7bb62c7c-2241-5a0b-8dbc-5f13251fb24e`)
Product	Cloud Foundation (`178cd063-de81-597f-ac65-1fe302bc1947`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2025-22226`	vulnerable	2026-06-08 07:10:52.483787	Details available HIGH (7.1) VMware ESXi, Workstation, and Fusion contain an information disclosure vulnerability due to an out-of-bounds read in HGFS. A malicious actor with administrative privileges to a virtual machine may be able to exploit this issue to leak memory from the vmx process. Published: 2025-03-04T11:56:57.541Z Updated: 2026-02-26T19:09:47.240Z Open on db.gcve.eu Reference links https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/25390	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-22225`	vulnerable	2026-06-08 07:10:52.462495	Details available HIGH (8.2) VMware ESXi contains an arbitrary write vulnerability. A malicious actor with privileges within the VMX process may trigger an arbitrary kernel write leading to an escape of the sandbox. Published: 2025-03-04T11:56:27.537Z Updated: 2026-02-26T19:09:47.409Z Open on db.gcve.eu Reference links https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/25390	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-22224`	vulnerable	2026-06-08 07:10:52.439278	Details available CRITICAL (9.3) VMware ESXi, and Workstation contain a TOCTOU (Time-of-Check Time-of-Use) vulnerability that leads to an out-of-bounds write. A malicious actor with local administrative privileges on a virtual machine may exploit this issue to execute code as the virtual machine's VMX process running on the host. Published: 2025-03-04T11:56:12.317Z Updated: 2026-02-26T19:09:47.563Z Open on db.gcve.eu Reference links https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/25390	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-20884`	vulnerable	2026-06-08 05:54:18.038834	Details available MEDIUM (6.1) VMware Workspace ONE Access and VMware Identity Manager contain an insecure redirect vulnerability. An unauthenticated malicious actor may be able to redirect a victim to an attacker controlled domain due to improper path handling leading to sensitive information disclosure. Published: 2023-05-30T15:05:53.284Z Updated: 2025-01-10T18:58:11.000Z Open on db.gcve.eu Reference links https://www.vmware.com/security/advisories/VMSA-2023-0011.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-31700`	vulnerable	2026-06-08 05:44:41.600661	Details available VMware Workspace ONE Access and Identity Manager contain an authenticated remote code execution vulnerability. VMware has evaluated the severity of this issue to be in the Important severity range with a maximum CVSSv3 base score of 7.2. Published: 2022-12-14T00:00:00.000Z Updated: 2025-04-22T16:06:25.180Z Open on db.gcve.eu Reference links https://www.vmware.com/security/advisories/VMSA-2022-0032.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2019-16919`	vulnerable	2026-06-08 05:13:09.582016	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.