Approved changes feed: RSS · Atom

cpe:2.3:a:vmware:vcenter_server:7.0:b:*:*:*:*:*:*

part: a version: 7.0 update: b

VendorVmware (7bb62c7c-2241-5a0b-8dbc-5f13251fb24e)
ProductVcenter Server (07ee07f5-6760-56ae-89f5-9d9572de30b1)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-38813 vulnerable 2026-06-08 06:41:48.196308 Privilege escalation vulnerability
HIGH (7.5)
The vCenter Server contains a privilege escalation vulnerability. A malicious actor with network access to vCenter Server may trigger this vulnerability to escalate privileges to root by sending a specially crafted network packet.
Published: 2024-09-17T17:13:13.924Z
Updated: 2025-10-21T22:55:44.624Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-38812 vulnerable 2026-06-08 06:41:48.187067 Heap-overflow vulnerability
CRITICAL (9.8)
The vCenter Server contains a heap-overflow vulnerability in the implementation of the DCERPC protocol. A malicious actor with network access to vCenter Server may trigger this vulnerability by sending a specially crafted network packet potentially leading to remote code execution.
Published: 2024-09-17T17:13:09.778Z
Updated: 2025-10-21T22:55:44.777Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-37087 vulnerable 2026-06-08 06:39:46.554735 Details available
MEDIUM (5.3)
The vCenter Server contains a denial-of-service vulnerability. A malicious actor with network access to vCenter Server may create a denial-of-service condition.
Published: 2024-06-25T14:16:13.273Z
Updated: 2024-10-31T13:19:28.741Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-37081 vulnerable 2026-06-08 06:39:46.493970 Details available
HIGH (7.8)
The vCenter Server contains multiple local privilege escalation vulnerabilities due to misconfiguration of sudo. An authenticated local user with non-administrative privileges may exploit these issues to elevate privileges to root on vCenter Server Appliance.
Published: 2024-06-18T05:43:20.580Z
Updated: 2024-08-02T03:43:50.934Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-37080 vulnerable 2026-06-08 06:39:46.475223 Details available
CRITICAL (9.8)
vCenter Server contains a heap-overflow vulnerability in the implementation of the DCERPC protocol. A malicious actor with network access to vCenter Server may trigger this vulnerability by sending a specially crafted network packet potentially leading to remote code execution.
Published: 2024-06-18T05:43:10.901Z
Updated: 2026-01-24T04:55:13.644Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-37079 vulnerable 2026-06-08 06:39:46.448385 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-22275 vulnerable 2026-06-08 06:29:34.398495 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-22274 vulnerable 2026-06-08 06:29:34.355389 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-34056 vulnerable 2026-06-08 06:06:24.333504 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-34048 vulnerable 2026-06-08 06:06:24.293759 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-20896 vulnerable 2026-06-08 05:54:18.092506 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-20895 vulnerable 2026-06-08 05:54:18.091062 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-20894 vulnerable 2026-06-08 05:54:18.089948 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-20893 vulnerable 2026-06-08 05:54:18.088683 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-20892 vulnerable 2026-06-08 05:54:18.068771 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-31698 vulnerable 2026-06-08 05:44:41.509767 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-31697 vulnerable 2026-06-08 05:44:41.459345 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-22982 vulnerable 2026-06-08 05:40:55.881620 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-22948 vulnerable 2026-06-08 05:40:55.657125 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-21992 vulnerable 2026-06-08 05:29:59.499490 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-21991 vulnerable 2026-06-08 05:29:59.495830 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-21986 vulnerable 2026-06-08 05:29:59.473474 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-21985 vulnerable 2026-06-08 05:29:59.468177 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-21973 vulnerable 2026-06-08 05:29:59.219199 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-21972 vulnerable 2026-06-08 05:29:59.214816 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.