CVE security advisories and vulnerability history for cloud foundation by vmware.
158
Total CVEs
Published
21
In CISA KEV
Exploited in the wild
35
Public exploits
PoC or exploit code
7.3
Avg CVSS
2019–2026
Last updated
Overview
vmware cloud foundation has 158 published CVE records since 2019, of which 21 are in CISA's Known Exploited Vulnerabilities catalog and 35 have a known public exploit. The average CVSS base score across scored CVEs is 7.3. Affected platforms include linux.
Severity and exploitation
How the CVSS severity of vmware cloud foundation's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.
Critical31
High72
Medium51
Low4
In CISA’s Known Exploited Vulnerabilities catalog
21
21 of vmware cloud foundation's CVEs are confirmed exploited in the wild.
Public exploits
35
35 of vmware cloud foundation's CVEs have a known public exploit available.
Affected versions and CVEs
Browse every vmware cloud foundation version named in a CVE, then pick one to see only the CVEs that affect it.
Specific versions
9.0.x.x5 CVEs
9.1.x.x5 CVEs
5.x4 CVEs
4.x1 CVE
Version ranges
3.0 <= v < 5.018 CVEs
3.0 <= v < 3.1011 CVEs
4.0 <= v <= 5.211 CVEs
4.0 <= v <= 4.010 CVEs
4.0.0 <= v < 4.0.19 CVEs
4.0.1 <= v <= 4.0.19 CVEs
>= 5.x, 4.5.x8 CVEs
Common weakness types
The CWE weakness categories most often found in vmware cloud foundation CVEs. Follow any weakness for its full explanation.
Common questions about vmware cloud foundation vulnerabilities.
How many CVEs does vmware cloud foundation have?
vmware cloud foundation has 158 published CVE records since 2019.
How many vmware cloud foundation CVEs are in CISA KEV?
Yes — 21 of vmware cloud foundation's CVEs are listed in CISA's Known Exploited Vulnerabilities catalog, confirmed exploited in the wild and carrying a CISA remediation deadline.
Are there public exploits for vmware cloud foundation vulnerabilities?
Yes — 35 of vmware cloud foundation's CVEs have a known public exploit.
Which versions of vmware cloud foundation are affected?
135 distinct vmware cloud foundation versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in vmware cloud foundation CVEs?
vmware cloud foundation's CVEs most often map to these CWE weakness types: CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-787 (Out-of-bounds Write), CWE-918 (Server-Side Request Forgery (SSRF)), CWE-125 (Out-of-bounds Read).
How many critical vmware cloud foundation vulnerabilities are there?
vmware cloud foundation has 31 critical and 72 high-severity CVEs.
What is the average severity of vmware cloud foundation CVEs?
The average CVSS base score across vmware cloud foundation's scored CVEs is 7.3.
