Vulnerabilidades de Vmware
CVEs publicadas que afetam produtos de Vmware: 262 registro(s), com severidade, exploração e correções.
Spring Framework 54Cloud Foundation 29Spring Ai 23Spring Security 22Spring Integration 15Telco Cloud Platform 15Vcenter Server 13Spring Boot 12Esxi 11Spring Cloud Config 10Spring Cloud Function 10Workstation 9Telco Cloud Infrastructure 9Spring For Graphql 8Spring Advanced Message Queuing Protocol 7Avi Load Balancer 7Spring Data Rest 7Aria Operations 7Fusion 7Spring For Apache Kafka 5Esx 5vSphere Foundation 5Spring Cloud Stream 4VCF operations 4Vrealize Suite Lifecycle Manager 4Tools 4Spring Cloud Gateway 4VMware Cloud Foundation Operations 3Rabbitmq Java Client 3Identity Manager 3Vcenter Server Appliance 2Spring Data Mongodb 2Spring Hateoas 2NSX 2Vsphere 2Open Vm Tools 2Vrealize Automation 2Workspace One Access 2vCenter 2Application Remote Collector 2
CVE-2026-59297
Baixa · 3.5
CWE-346 27/08/2026
Implementation of isSecure() call of ServerlessHttpServletRequest does not verify the…
Implementation of isSecure() call of ServerlessHttpServletRequest does not verify the actual scheme.
Spring Cloud Function 5.0.0 - 5.0.3
Spring Cloud Function 4.3.0 - 4.3.4
Spring Cloud Function 4.2.0 - 4.2.7
CVE-2026-59294
Média · 6.5
CWE-22 27/08/2026
Path Traversal em Vmware Spring Ai
ResourceCacheService.getCacheName() builds the on-disk filename by appending the URI fragment verbatim, without stripping path separators or .. sequences, and passes the result to new File(resourceParentFolder, newFileName) before writing the downloaded bytes there.
Spring AI 2.0.0
Spring AI 1.1.0 - 1.1.8
Spring AI 1.0.9 and earlier
CVE-2026-59293
Média · 6.6
CWE-757 27/08/2026
Unless the application explicitly raises smbMinVersion, the jCIFS client will negotiate…
Unless the application explicitly raises smbMinVersion, the jCIFS client will negotiate down to SMB1/CIFS, which lacks mandatory signing/encryption and is vulnerable to NTLM relay and content-tampering MITM.
Spring Integration 7.1.0
Spring Integration 7.0.0 - 7.0.5
Spring Integration 6.5.0 - 6.5.10
Spring Integration 6.4.0 - 6.4.12
CVE-2026-59292
Baixa · 3.2
CWE-732 27/08/2026
Incorrect Permission Assignment for Critical Resource em Vmware Spring Integration
PropertiesPersistingMetadataStore, the default file-based ConcurrentMetadataStore, persists its state to ${java.io.tmpdir}/spring-integration/metadata-store.properties with world-readable permissions.
Spring Integration 7.1.0
Spring Integration 7.0.0 - 7.0.5
Spring Integration 6.5.0 - 6.5.10
Spring Integration 6.4.0 - 6.4.12
Spring Integration 5.5.21 and earlier
CVE-2026-59291
Média · 5.5
CWE-918 27/08/2026
Server-Side Request Forgery (SSRF) em Vmware Spring Cloud Function
Potential arbitrary file read and SSRF vulnerability in Spring Cloud Function.
Spring Cloud Function 5.0.0 - 5.0.3
Spring Cloud Function 4.3.0 - 4.3.4
Spring Cloud Function 4.2.0 - 4.2.7
CVE-2026-59289
Alta · 7.5
CWE-770 27/08/2026
Allocation of Resources Without Limits or Throttling em Vmware Spring For Graphql
Spring for GraphQL's Spring Data pagination support resolves arguments of a scrollable query and forwards the client-supplied values to the underlying repository. An attacker can forge a malicious query for a Connection field that can exhaust application memory or place significant, prolonged load on the underlying datastore, resulting in a Denial of Service.
Spring for GraphQL 2.0.0 - 2.0.4
Spring for GraphQL 1.4.0 - 1.4.6
Spring for GraphQL 1.2.0 - 1.3.9
CVE-2026-59288
Alta · 7.4
CWE-200 27/08/2026
Exposure of Sensitive Information em Vmware Spring For Graphql
The GraphiQL page bundled with Spring for GraphQL sends requests to the GraphQL endpoints of the application. An attacker can share a malicious URL so that the victim's browser might leak confidential information to the attacker's website.
Spring for GraphQL 2.0.0 - 2.0.4
Spring for GraphQL 1.4.0 - 1.4.6
Spring for GraphQL 1.1.0 - 1.3.9
Spring for GraphQL 1.0.0 - 1.0.7
CVE-2026-59287
Média · 5.9
CWE-770 27/08/2026
Allocation of Resources Without Limits or Throttling em Vmware Spring For Graphql
Spring for GraphQL is vulnerable to Denial of Service attacks when using the WebSocket client with keepAlive enabled.
Spring for GraphQL 2.0.0 - 2.0.4
Spring for GraphQL 1.4.0 - 1.4.6
Spring for GraphQL 1.3.0 - 1.3.9
CVE-2026-59286
Alta · 8.1
CWE-494 27/08/2026
Download of Code Without Integrity Check em Vmware Spring For Graphql
The GraphiQL page bundled with Spring for GraphQL loads JavaScript libraries from a public CDN, without Subresource Integrity checks. An attacker can inject malicious code in those scripts and execute arbitrary code on the browser loading the GraphiQL page.
Spring for GraphQL 2.0.0 - 2.0.4
Spring for GraphQL 1.4.0 - 1.4.6
Spring for GraphQL 1.1.0 - 1.3.9
Spring for GraphQL 1.0.0 - 1.0.7
CVE-2026-59285
Alta · 8.1
CWE-502 27/08/2026
Deserialization of Untrusted Data em Vmware Spring For Graphql
Spring for GraphQL applications are vulnerable to Unsafe Deserialization when processing paginated GraphQL queries.
Spring for GraphQL 2.0.0 - 2.0.4
CVE-2026-59283
Crítica · 9.1
CWE-913 27/08/2026
Improper Control of Dynamically-Managed Code Resources em Vmware Spring Framework
Applications that evaluate Spring Expression Language (SpEL) expressions using SimpleEvaluationContext may be vulnerable to a safety guard bypass when the SpEL expression compiler is active.
Spring Framework 7.0.0 - 7.0.8
Spring Framework 6.2.0 - 6.2.19
Spring Framework 6.1.0 - 6.1.28
Spring Framework 6.0.0 - 6.0.30
Spring Framework 5.3.0 - 5.3.49
Spring Framework 5.2.25.RELEASE and earlier
CVE-2026-59282
Alta · 7.5
CWE-400 27/08/2026
Uncontrolled Resource Consumption em Vmware Spring Framework
Spring Framework applications that use Spring's data binding infrastructure to apply user-supplied property paths onto a target object may be vulnerable to a Denial of Service (DoS) attack.
Spring Framework 7.0.0 - 7.0.8
Spring Framework 6.2.0 - 6.2.19
Spring Framework 6.1.0 - 6.1.28
Spring Framework 6.0.0 - 6.0.30
Spring Framework 5.3.0 - 5.3.49
Spring Framework 5.2.25.RELEASE and earlier
CVE-2026-59281
Média · 6.1
CWE-79 27/08/2026
Cross-site Scripting (XSS) em Vmware Spring Framework
Spring MVC and WebFlux applications that obtain a data-binding Errors instance with HTML escaping enabled and then render field errors using the no-argument Errors.getFieldErrors() or Errors.getFieldError() accessors are vulnerable to arbitrary HTML/JavaScript code injection, potentially resulting in a reflected cross-site scripting (XSS) vulnerability.
Spring Framework 7.0.0 - 7.0.8
Spring Framework 6.2.0 - 6.2.19
Spring Framework 6.1.0 - 6.1.28
Spring Framework 6.0.0 - 6.0.30
Spring Framework 5.3.0 - 5.3.49
Spring Framework 5.2.25.RELEASE and earlier
CVE-2026-59277
Média · 5.3
CWE-693 27/08/2026
Spring Security's InetAddressMatchers utility provides matchInternal() and…
Spring Security's InetAddressMatchers utility provides matchInternal() and matchExternal() builders for constructing an InetAddressMatcher that classifies a given IP address as belonging to an internal (private) or external (public) network.
Spring Security 7.1.0
CVE-2026-59276
Média · 5.9
CWE-208 27/08/2026
Several components in Spring Security compare security-sensitive values using standard…
Several components in Spring Security compare security-sensitive values using standard string equality (String.equals()) rather than a constant-time comparison. Because String.equals() returns as soon as it finds a differing character, the time taken to reject an incorrect value is proportional to the number of leading characters that match the expected value.
Spring Security 7.1.0
Spring Security 7.0.0 - 7.0.6
Spring Security 6.5.0 - 6.5.11
Spring Security 6.4.0 - 6.4.18
Spring Security 5.8.0 - 5.8.27
Spring Security 5.7.0 - 5.7.25
CVE-2026-59280
Média · 4.3
CWE-22 27/08/2026
Path Traversal em Vmware Spring Framework
Applications using Spring Framework's FreeMarker integration may be vulnerable to a path traversal attack when a controller returns a view name derived from untrusted input and FreeMarker is configured to resolve templates through SpringTemplateLoader.
Spring Framework 7.0.0 - 7.0.8
Spring Framework 6.2.0 - 6.2.19
Spring Framework 6.1.0 - 6.1.28
Spring Framework 6.0.0 - 6.0.30
Spring Framework 5.3.0 - 5.3.49
Spring Framework 5.2.25.RELEASE and earlier
CVE-2026-59272
Média · 6.8
CWE-297 27/08/2026
Any application shipping logs to RabbitMQ over TLS via the Log4j2 appender, relying on…
Any application shipping logs to RabbitMQ over TLS via the Log4j2 appender, relying on the documented default, is exposed to man-in-the-middle interception of every log event.
Spring AMQP 4.1.0
Spring AMQP 4.0.0 - 4.0.4
Spring AMQP 3.2.0 - 3.2.12
Spring AMQP 2.4.18 and earlier
CVE-2026-59354
Alta · 8.8
CWE-20 27/08/2026
Improper Input Validation em Vmware Spring Security
In versions of Spring Security's OAuth2 Authorization Server module 7.0.0 through 7.0.4, when Dynamic Client Registration is explicitly enabled, the registration endpoint performs insufficient validation of certain client metadata fields supplied by the registering client. An attacker who possesses a valid Initial Access Token can register a malicious client with crafted metadata, which, depending on server configuration and how the metadata is later rendered or used, may result in Stored Cross-Site Scripting (XSS), Privilege Escalation, or Server-Side Request Forgery (SSRF).
CVE-2026-59278
Média · 6.5
CWE-918 27/08/2026
Server-Side Request Forgery (SSRF) em Vmware Spring For Apache Kafka
JsonKafkaHeaderMapper and DefaultKafkaHeaderMapper include java.net in their default trusted packages list. When these mappers are used — which is the default configuration for all @KafkaListener consumers — an external Kafka producer can inject a java.net.InetAddress type via the spring_json_header_types message header.
Spring for Apache Kafka 4.1.0
Spring for Apache Kafka 4.0.0 - 4.0.6
Spring for Apache Kafka 3.0.0 - 3.3.16
Spring for Apache Kafka 2.9.0 - 2.9.14
Spring for Apache Kafka 2.8.12 and earlier
CVE-2026-59275
Média · 4.9
CWE-502 27/08/2026
Deserialization of Untrusted Data em Vmware Spring Advanced Message Queuing Protocol
A single hostile AMQP message can terminate the entire consumer JVM (System.exit(99)), not just the listener thread — full availability loss for every workload co-located in that process.
Spring AMQP 4.1.0
Spring AMQP 4.0.0 - 4.0.4
Spring AMQP 3.2.0 - 3.2.12
Spring AMQP 2.4.18 and earlier
CVE-2026-59274
Média · 6.5
CWE-409 27/08/2026
The UnZipTransformer does not limit decompressed entry size or entry count when…
The UnZipTransformer does not limit decompressed entry size or entry count when processing archives. Consequently, an attacker can send a zip archive that can exhaust JVM heap memory, causing a denial-of-service outage.
Spring Integration 7.1.0
Spring Integration 7.0.0 - 7.0.5
Spring Integration 6.5.0 - 6.5.10
Spring Integration 6.4.0 - 6.4.12
CVE-2026-59271
Média · 6.5
CWE-209 27/08/2026
Information Exposure Through an Error Message em Vmware Spring Advanced Message Queuing Protocol
When the RabbitMQ management aliveness check fails, the configured admin password is embedded in cleartext in the thrown exception message.
Spring AMQP 4.1.0
Spring AMQP 4.0.0 - 4.0.4
Spring AMQP 3.2.0 - 3.2.12
Spring AMQP 2.4.18 and earlier
CVE-2026-59270
Crítica · 9.1
CWE-863 27/08/2026
Incorrect Authorization em Vmware Spring Security
Spring Security's embedded UnboundID LDAP server (UnboundIdContainer) unconditionally registers an administrative credential and binds its listener to all available network interfaces.
Spring Security 7.1.0
Spring Security 7.0.0 - 7.0.6
Spring Security 6.5.0 - 6.5.11
Spring Security 6.4.0 - 6.4.18
Spring Security 5.8.0 - 5.8.27
Spring Security 5.7.0 - 5.7.25
CVE-2026-47894
Alta · 7.5
27/08/2026
Spring Cloud Config Server native environment repository allows exposure of…
Spring Cloud Config Server native environment repository allows exposure of configuration files outside of the configured repository path.
Spring Cloud Config 5.0.0 - 5.0.4
Spring Cloud Config 4.3.0 - 4.3.4
Spring Cloud Config 4.0.0 - 4.2.8
Spring Cloud Config 3.1.14 and earlier
CVE-2026-47893
Alta · 7.5
CWE-209 27/08/2026
Information Exposure Through an Error Message em Vmware Spring Framework
A Spring WebFlux application that supports WebSocket connections may expose indirectly sensitive user information by including request headers in an exception reason.
Spring Framework 7.0.0 - 7.0.8
Spring Framework 6.2.0 - 6.2.19
Spring Framework 6.1.0 - 6.1.28
Spring Framework 6.0.0 - 6.0.30
Spring Framework 5.3.0 - 5.3.49
Spring Framework 5.2.25.RELEASE and earlier