Current status
Authorized · Moderate impact · since 2026-07-07
Service modelSaaS
MarketplaceRev5 · source: marketplace
Security posture
13 critical
21 high
29 on KEV
· 36 correlated CVEs
CMMC DOMAINS ADDRESSED
STATUS TIMELINE · SCD2
| STATUS | FROM | TO |
|---|---|---|
| Authorized | 2026-07-07 | current |
AUTHORIZATIONS
| AGENCY | TYPE | DATE |
|---|---|---|
| Department of Commerce | Agency | 2019-08-01 |
EXPOSED CVEs · CORRELATED TO THIS PRODUCT
all exposures
| SEVERITY | CVE | TITLE |
|---|---|---|
| HIGH | CVE-2026-41699 | CVE-2026-41699: Spring for GraphQL applications are vulnerable to Unsafe Deserialization when pr |
| HIGH | CVE-2026-41855 | CVE-2026-41855: In an untrusted JMS environment, org.springframework.jms.support.converter.Mappi |
| MEDIUM | CVE-2026-40974 | CVE-2026-40974: Spring Boot's Cassandra auto-configuration does not perform hostname verificatio |
| MEDIUM | CVE-2026-40971 | CVE-2026-40971: When configured to use an SSL bundle, Spring Boot's RabbitMQ auto-configuration |
| HIGH | CVE-2025-22224 | VMware ESXi and Workstation TOCTOU Race Condition Vulnerability |
| CRITICAL | CVE-2025-22225 | VMware ESXi Arbitrary Write Vulnerability |
| HIGH | CVE-2025-22226 | VMware ESXi, Workstation, and Fusion Information Disclosure Vulnerability |
| HIGH | CVE-2024-38812 | VMware vCenter Server Heap-Based Buffer Overflow Vulnerability |
| HIGH | CVE-2024-38813 | VMware vCenter Server Privilege Escalation Vulnerability |
| CRITICAL | CVE-2024-37085 | VMware ESXi Authentication Bypass Vulnerability |
| HIGH | CVE-2022-22948 | VMware vCenter Server Incorrect Default File Permissions Vulnerability |
| HIGH | CVE-2023-34048 | VMware vCenter Server Out-of-Bounds Write Vulnerability |
| HIGH | CVE-2023-20867 | VMware Tools Authentication Bypass Vulnerability |
| HIGH | CVE-2023-20887 | Vmware Aria Operations for Networks Command Injection Vulnerability |
| HIGH | CVE-2022-22963 | VMware Tanzu Spring Cloud Function Remote Code Execution Vulnerability |
| HIGH | CVE-2022-22947 | VMware Spring Cloud Gateway Code Injection Vulnerability |
| HIGH | CVE-2022-22960 | VMware Multiple Products Privilege Escalation Vulnerability |
| CRITICAL | CVE-2022-22954 | VMware Workspace ONE Access and Identity Manager Server-Side Template Injection Vulnerability |
| HIGH | CVE-2022-22965 | Spring Framework JDK 9+ Remote Code Execution Vulnerability |
| CRITICAL | CVE-2018-1273 | VMware Tanzu Spring Data Commons Property Binder Vulnerability |
| HIGH | CVE-2018-6961 | VMware SD-WAN Edge by VeloCloud Command Injection Vulnerability |
| HIGH | CVE-2020-5410 | VMware Tanzu Spring Cloud Config Directory Traversal Vulnerability |
| HIGH | CVE-2021-21973 | VMware vCenter Server and Cloud Foundation Server Side Request Forgery (SSRF) Vulnerability |
| CRITICAL | CVE-2021-21975 | VMware Server Side Request Forgery in vRealize Operations Manager API |
| HIGH | CVE-2021-22017 | VMware vCenter Server Improper Access Control |
| CRITICAL | CVE-2019-5544 | VMware ESXi and Horizon DaaS OpenSLP Heap-Based Buffer Overflow Vulnerability |
| HIGH | CVE-2020-3950 | VMware Multiple Products Privilege Escalation Vulnerability |
| HIGH | CVE-2020-3952 | VMware vCenter Server Information Disclosure Vulnerability |
| CRITICAL | CVE-2020-3992 | VMware ESXi OpenSLP Use-After-Free Vulnerability |
| HIGH | CVE-2020-4006 | Multiple VMware Products Command Injection Vulnerability |
| CRITICAL | CVE-2021-21972 | VMware vCenter Server Remote Code Execution Vulnerability |
| CRITICAL | CVE-2021-21985 | VMware vCenter Server Improper Input Validation Vulnerability |
| CRITICAL | CVE-2021-22005 | VMware vCenter Server File Upload Vulnerability |
| CRITICAL | CVE-2021-21985 | CVE-2021-21985: The vSphere Client (HTML5) contains a remote code execution vulnerability due to |
| CRITICAL | CVE-2021-21972 | CVE-2021-21972: The vSphere Client (HTML5) contains a remote code execution vulnerability in a v |
| CRITICAL | CVE-2020-3992 | CVE-2020-3992: OpenSLP as used in VMware ESXi (7.0 before ESXi_7.0.1-0.0.16850804, 6.7 before E |