GCVE - cpe:2.3:a:vmware:cloud_foundation:3.7.2:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:vmware:cloud_foundation:3.7.2:*:*:*:*:*:*:*

part: a version: 3.7.2 update: *

Vendor	Vmware (`7bb62c7c-2241-5a0b-8dbc-5f13251fb24e`)
Product	Cloud Foundation (`178cd063-de81-597f-ac65-1fe302bc1947`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2022-31699`	vulnerable	2026-06-08 05:44:41.523527	Details available VMware ESXi contains a heap-overflow vulnerability. A malicious local actor with restricted privileges within a sandbox process may exploit this issue to achieve a partial information disclosure. Published: 2022-12-13T00:00:00.000Z Updated: 2025-04-22T15:47:15.962Z Open on db.gcve.eu Reference links https://www.vmware.com/security/advisories/VMSA-2022-0030.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-31698`	vulnerable	2026-06-08 05:44:41.484111	Details available The vCenter Server contains a denial-of-service vulnerability in the content library service. A malicious actor with network access to port 443 on vCenter Server may exploit this issue to trigger a denial-of-service condition by sending a specially crafted header. Published: 2022-12-13T00:00:00.000Z Updated: 2025-04-22T03:26:59.398Z Open on db.gcve.eu Reference links https://www.vmware.com/security/advisories/VMSA-2022-0030.html https://www.talosintelligence.com/vulnerability_reports/TALOS-2022-1588	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-22972`	vulnerable	2026-06-08 05:40:55.816855	Details available VMware Workspace ONE Access, Identity Manager and vRealize Automation contain an authentication bypass vulnerability affecting local domain users. A malicious actor with network access to the UI may be able to obtain administrative access without the need to authenticate. Published: 2022-05-20T20:18:39.000Z Updated: 2024-08-03T03:28:42.716Z Open on db.gcve.eu Reference links https://www.vmware.com/security/advisories/VMSA-2022-0014.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-21983`	vulnerable	2026-06-08 05:29:59.452892	Details available Arbitrary file write vulnerability in vRealize Operations Manager API (CVE-2021-21983) prior to 8.4 may allow an authenticated malicious actor with network access to the vRealize Operations Manager API can write files to arbitrary locations on the underlying photon operating system. Published: 2021-03-31T17:50:36.000Z Updated: 2024-08-03T18:30:23.722Z Open on db.gcve.eu Reference links https://www.vmware.com/security/advisories/VMSA-2021-0004.html http://packetstormsecurity.com/files/162349/VMware-vRealize-Operations-Manager-Server-Side-Request-Forgery-Code-Execution.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-21975`	vulnerable	2026-06-08 05:29:59.390456	Details available Server Side Request Forgery in vRealize Operations Manager API (CVE-2021-21975) prior to 8.4 may allow a malicious actor with network access to the vRealize Operations Manager API can perform a Server Side Request Forgery attack to steal administrative credentials. Published: 2021-03-31T17:51:51.000Z Updated: 2025-10-21T23:25:50.479Z Open on db.gcve.eu Reference links https://www.vmware.com/security/advisories/VMSA-2021-0004.html http://packetstormsecurity.com/files/162349/VMware-vRealize-Operations-Manager-Server-Side-Request-Forgery-Code-Execution.html	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.