GCVE - cpe:2.3:a:vmware:cloud_foundation:3.0:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:vmware:cloud_foundation:3.0:*:*:*:*:*:*:*

part: a version: 3.0 update: *

Vendor	Vmware (`7bb62c7c-2241-5a0b-8dbc-5f13251fb24e`)
Product	Cloud Foundation (`178cd063-de81-597f-ac65-1fe302bc1947`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2022-31698`	vulnerable	2026-06-08 05:44:41.478915	Details available The vCenter Server contains a denial-of-service vulnerability in the content library service. A malicious actor with network access to port 443 on vCenter Server may exploit this issue to trigger a denial-of-service condition by sending a specially crafted header. Published: 2022-12-13T00:00:00.000Z Updated: 2025-04-22T03:26:59.398Z Open on db.gcve.eu Reference links https://www.vmware.com/security/advisories/VMSA-2022-0030.html https://www.talosintelligence.com/vulnerability_reports/TALOS-2022-1588	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-22972`	vulnerable	2026-06-08 05:40:55.809671	Details available VMware Workspace ONE Access, Identity Manager and vRealize Automation contain an authentication bypass vulnerability affecting local domain users. A malicious actor with network access to the UI may be able to obtain administrative access without the need to authenticate. Published: 2022-05-20T20:18:39.000Z Updated: 2024-08-03T03:28:42.716Z Open on db.gcve.eu Reference links https://www.vmware.com/security/advisories/VMSA-2022-0014.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-22948`	vulnerable	2026-06-08 05:40:55.621958	Details available The vCenter Server contains an information disclosure vulnerability due to improper permission of files. A malicious actor with non-administrative access to the vCenter Server may exploit this issue to gain access to sensitive information. Published: 2022-03-29T17:24:33.000Z Updated: 2025-10-21T23:15:43.268Z Open on db.gcve.eu Reference links https://www.vmware.com/security/advisories/VMSA-2022-0009.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-21983`	vulnerable	2026-06-08 05:29:59.452753	Details available Arbitrary file write vulnerability in vRealize Operations Manager API (CVE-2021-21983) prior to 8.4 may allow an authenticated malicious actor with network access to the vRealize Operations Manager API can write files to arbitrary locations on the underlying photon operating system. Published: 2021-03-31T17:50:36.000Z Updated: 2024-08-03T18:30:23.722Z Open on db.gcve.eu Reference links https://www.vmware.com/security/advisories/VMSA-2021-0004.html http://packetstormsecurity.com/files/162349/VMware-vRealize-Operations-Manager-Server-Side-Request-Forgery-Code-Execution.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-21975`	vulnerable	2026-06-08 05:29:59.385873	Details available Server Side Request Forgery in vRealize Operations Manager API (CVE-2021-21975) prior to 8.4 may allow a malicious actor with network access to the vRealize Operations Manager API can perform a Server Side Request Forgery attack to steal administrative credentials. Published: 2021-03-31T17:51:51.000Z Updated: 2025-10-21T23:25:50.479Z Open on db.gcve.eu Reference links https://www.vmware.com/security/advisories/VMSA-2021-0004.html http://packetstormsecurity.com/files/162349/VMware-vRealize-Operations-Manager-Server-Side-Request-Forgery-Code-Execution.html	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.