VMWare Security Advisories, Certifications & Guides

ronjor · Mar 30, 2021

VMSA-2021-0004 30 Mar 2021

Advisory ID:VMSA-2021-0004
CVSSv3 Range:7.2 - 8.6
Issue Date:2021-03-30
Updated On:2021-03-30 (Initial Advisory)
CVE(s):CVE-2021-21975, CVE-2021-21983
Synopsis:VMware vRealize Operations updates address Server Side Request Forgery and Arbitrary File Write vulnerabilities (CVE-2021-21975, CVE-2021-21983)
Click to expand...

ronjor · Apr 1, 2021

VMSA-2021-0005 01 Apr 2021

Advisory ID:VMSA-2021-0005
CVSSv3 Range:9.1
Issue Date:2021-04-01
Updated On:2021-04-01 (Initial Advisory)
CVE(s):CVE-2021-21982
Synopsis:VMware Carbon Black Cloud Workload appliance update addresses incorrect URL handling vulnerability (CVE-2021-21982)
Click to expand...

ronjor · Apr 19, 2021

VMSA-2021-0006 19 Apr 2021

Advisory ID:VMSA-2021-0006
CVSSv3 Range:7.5
Issue Date:2021-04-19
Updated On:2021-04-19 (Initial Advisory)
CVE(s):CVE-2021-21981
Synopsis:VMware NSX-T updates address a privilege escalation vulnerability (CVE-2021-21981)
Click to expand...

ronjor · May 6, 2021

VMSA-2021-0007 05 May 2021

Advisory ID:VMSA-2021-0007
CVSSv3 Range:9.8
Issue Date:2021-05-05
Updated On:2021-05-05 (Initial Advisory)
CVE(s):CVE-2021-21984
Synopsis:VMware vRealize Business for Cloud updates address a remote code execution vulnerability (CVE-2021-21984)
Click to expand...

ronjor · May 11, 2021

VMSA-2021-0008 11 May 2021

Advisory ID:VMSA-2021-0008
CVSSv3 Range:3.7
Issue Date:2021-05-11
Updated On:2021-05-11 (Initial Advisory)
CVE(s):CVE-2021-21990
Synopsis:VMware Workspace ONE UEM console patches address a Cross-site scripting vulnerability (CVE-2021-21990)
Click to expand...

ronjor · May 21, 2021

VMSA-2021-0009 21 May 2021

Advisory ID:VMSA-2021-0009
CVSSv3 Range:3.2
Issue Date:2021-05-20
Updated On:2021-05-20 (Initial Advisory)
CVE(s):CVE-2021-21987, CVE-2021-21988, CVE-2021-21989
Synopsis:VMware Workstation and Horizon Client for Windows updates address multiple security vulnerabilities (CVE-2021-21987, CVE-2021-21988, CVE-2021-21989)
Click to expand...

ronjor · May 25, 2021

VMSA-2021-0010 25 May 2021

Advisory ID:VMSA-2021-0010
CVSSv3 Range:6.5-9.8
Issue Date:2021-05-25
Updated On:2021-05-25 (Initial Advisory)
CVE(s):CVE-2021-21985, CVE-2021-21986
Synopsis:VMware vCenter Server updates address remote code execution and authentication vulnerabilities (CVE-2021-21985, CVE-2021-21986)
Click to expand...

ronjor · Jun 4, 2021

Unpatched VMware vCenter Software

Original release date: June 04, 2021
CISA is aware of the likelihood that cyber threat actors are attempting to exploit CVE-2021-21985, a remote code execution vulnerability in VMware vCenter Server and VMware Cloud Foundation. Although patches were made available on May 25, 2021, unpatched systems remain an attractive target and attackers can exploit this vulnerability to take control of an unpatched system.
Click to expand...

CISA encourages users and administrators to review VMware’s VMSA-2021-010, blogpost, and FAQ for more information about the vulnerability and apply the necessary updates as soon as possible, even if out-of-cycle work is required. If an organization cannot immediately apply the updates, then apply the workarounds in the interim.
Click to expand...

ronjor · Jun 18, 2021

VMSA-2021-0011 17 June 2021

Advisory ID:VMSA-2021-0011
CVSSv3 Range:3.3
Issue Date:2021-06-17
Updated On:2021-06-17 (Initial Advisory)
CVE(s):CVE-2021-21997
Click to expand...

Synopsis:VMware Tools for Windows update addresses a denial-of-service vulnerability (CVE-2021-21997)
Click to expand...

ronjor · Jun 22, 2021

VMSA-2021-0013 22 June 2021

Advisory ID:VMSA-2021-0013
CVSSv3 Range:7.8
Issue Date:2021-06-22
Updated On:2021-06-22 (Initial Advisory)
CVE(s):CVE-2021-21999
Click to expand...

Synopsis:VMware Tools, VMRC and VMware App Volumes update addresses a local privilege escalation vulnerability (CVE-2021-21999)
Click to expand...

ronjor · Jul 13, 2021

VMSA-2021-0014 13 July 2021

Advisory ID:VMSA-2021-0014
CVSSv3 Range:5.3-7.0
Issue Date:2021-07-13
Updated On:2021-07-13 (Initial Advisory)
CVE(s):CVE-2021-21994, CVE-2021-21995
Click to expand...

Synopsis:VMware ESXi updates address authentication and denial of service vulnerabilities (CVE-2021-21994, CVE-2021-21995)
Click to expand...

ronjor · Jul 13, 2021

VMSA-2021-0015

Advisory ID:2021-0015
CVSSv3 Range:6.8
Issue Date:2021-07-13
Updated On:2021-07-13 (Initial Advisory)
CVE(s):CVE-2021-22000
Click to expand...

Synopsis:VMware ThinApp update addresses a DLL hijacking vulnerability (CVE-2021-22000)
Click to expand...

ronjor · Aug 5, 2021

VMSA-2021-0016 05 Aug 2021

Advisory ID:VMSA-2021-0016
CVSSv3 Range:3.7-8.6
Issue Date:2021-08-05
Updated On:2021-08-05 (Initial Advisory)
Click to expand...

CVE(s):CVE-2021-22002, CVE-2021-22003
Synopsis:VMware Workspace One Access, Identity Manager and vRealize Automation address multiple vulnerabilities (CVE-2021-22002, CVE-2021-22003)
Click to expand...

ronjor · Aug 12, 2021

VMSA-2021-0016.1 Updated 12 Aug 2921

Advisory ID:VMSA-2021-0016.1
CVSSv3 Range:3.7-8.6
Issue Date:2021-08-05
Updated On:2021-08-12
CVE(s):CVE-2021-22002, CVE-2021-22003
Synopsis:VMware Workspace ONE Access, Identity Manager and vRealize Automation address multiple vulnerabilities (CVE-2021-22002, CVE-2021-22003)
Click to expand...

ronjor · Aug 20, 2021

VMSA-2021-0017 19 Aug 2021

Advisory ID:VMSA-2021-0017
CVSSv3 Range:5.3
Issue Date:2021-08-19
Updated On:2021-08-19 (Initial Advisory)
CVE(s):CVE-2021-22029
Synopsis: VMware Workspace ONE UEM console patches address a denial of service vulnerability (CVE-2021-22029)
Click to expand...

ronjor · Aug 24, 2021

VMSA-2021-0014.1 24 Aug 2021

Advisory ID:VMSA-2021-0014.1
CVSSv3 Range:5.3-7.0
Issue Date:2021-07-13
Updated On:2021-08-24
CVE(s):CVE-2021-21994, CVE-2021-21995
Synopsis:VMware ESXi updates address authentication and denial of service vulnerabilities (CVE-2021-21994, CVE-2021-21995)
Click to expand...

ronjor · Aug 24, 2021

VMSA-2021-0018 24 Aug 2021

Advisory ID:VMSA-2021-0018
CVSSv3 Range:4.4 - 8.6
Issue Date:2021-08-24
Updated On:2021-08-24 (Initial Advisory)
Click to expand...

CVE(s):CVE-2021-22022, CVE-2021-22023, CVE-2021-22024, CVE-2021-22025, CVE-2021-22026, CVE-2021-22027
Synopsis:VMware vRealize Operations updates address multiple security vulnerabilities (CVE-2021-22022, CVE-2021-22023, CVE-2021-22024, CVE-2021-22025, CVE-2021-22026, CVE-2021-22027)
Click to expand...

ronjor · Aug 25, 2021

VMSA-2021-0019 24 Aug 2021

Advisory ID:VMSA-2021-0019
CVSSv3 Range:6.5
Issue Date:2021-08-24
Updated On:2021-08-24 (Initial Advisory)
Click to expand...

CVE(s):CVE-2021-22021
Synopsis:VMware vRealize Log Insight updates address Cross Site Scripting (XSS) vulnerability (CVE-2021-22021)
Click to expand...

ronjor · Sep 21, 2021

VMSA-2021-0020 21 Sep 2021

Advisory ID:VMSA-2021-0020
CVSSv3 Range:4.3-9.8
Issue Date:2021-09-21
Updated On:2021-09-21 (Initial Advisory)
Click to expand...

CVE(s):CVE-2021-21991, CVE-2021-21992, CVE-2021-21993, CVE-2021-22005, CVE-2021-22006, CVE-2021-22007, CVE-2021-22008, CVE-2021-22009, CVE-2021-22010, CVE-2021-22011, CVE-2021-22012, CVE-2021-22013, CVE-2021-22014, CVE-2021-22015, CVE-2021-22016, CVE-2021-22017, CVE-2021-22018, CVE-2021-22019, CVE-2021-22020
Synopsis:VMware vCenter Server updates address multiple security vulnerabilities
Click to expand...

ronjor · Sep 24, 2021

VMSA-2021-0020.1 24 Sep 2021

Advisory ID:VMSA-2021-0020.1
CVSSv3 Range:4.3-9.8
Issue Date:2021-09-21
Updated On:2021-09-24
Click to expand...

CVE(s):CVE-2021-21991, CVE-2021-21992, CVE-2021-21993, CVE-2021-22005, CVE-2021-22006, CVE-2021-22007, CVE-2021-22008, CVE-2021-22009, CVE-2021-22010, CVE-2021-22011, CVE-2021-22012, CVE-2021-22013, CVE-2021-22014, CVE-2021-22015, CVE-2021-22016, CVE-2021-22017, CVE-2021-22018, CVE-2021-22019, CVE-2021-22020
Synopsis:VMware vCenter Server updates address multiple security vulnerabilities
Click to expand...

ronjor · Oct 12, 2021

VMSA-2021-0022 12 Oct 2021

Advisory ID:VMSA-2021-0022
CVSSv3 Range:6.5
Click to expand...

Issue Date:2021-10-12
Updated On:2021-10-12 (Initial Advisory)
CVE(s):CVE-2021-22035
Synopsis:VMware vRealize Log Insight updates address CSV injection vulnerability (CVE-2021-22035)
Click to expand...

ronjor · Oct 12, 2021

VMSA-2021-0023 12 Oct 2021

Advisory ID:VMSA-2021-0023
CVSSv3 Range:6.5
Click to expand...

Issue Date:2021-10-12
Updated On:2021-10-12 (Initial Advisory)
CVE(s):CVE-2021-22036
Synopsis:VMware vRealize Orchestrator update addresses open redirect vulnerability (CVE-2021-22036)
Click to expand...

ronjor · Oct 13, 2021

VMSA-2021-0023.1 13 Oct 2021

Advisory ID:VMSA-2021-0023.1
CVSSv3 Range:6.5
Click to expand...

Issue Date:2021-10-12
Updated On:2021-10-13
CVE(s):CVE-2021-22036
Synopsis:VMware vRealize Orchestrator update addresses open redirect vulnerability (CVE-2021-22036)
Click to expand...

ronjor · Oct 13, 2021

VMSA-2021-0021 12 Oct 2021

Advisory ID:VMSA-2021-0021
CVSSv3 Range:2.7
Click to expand...

Issue Date:2021-10-12
Updated On:2021-10-12
CVE(s):CVE-2021-22033
Synopsis:VMware vRealize Operations update addresses SSRF Vulnerability (CVE-2021-22033)
Click to expand...

ronjor · Oct 19, 2021

VMSA-2021-0024 19 Oct 2021

Advisory ID:VMSA-2021-0024
CVSSv3 Range:5.3
Click to expand...

Issue Date:2021-10-19
Updated On:2021-10-19
CVE(s):CVE-2021-22034
Synopsis:VMware vRealize Operations Tenant App update addresses Information Disclosure Vulnerability (CVE-2021-2203
Click to expand...

4)

Log in or Sign up

VMWare Security Advisories, Certifications & Guides

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

Log in or Sign up

VMWare Security Advisories, Certifications & Guides

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

Useful Searches