VMware
KEV profile: additions per year, time to addition and ransomware share.
26
KEV entries
82
Median days to addition
35 %
Ransomware share
KEV entries per year
Entries
| CVE | Product | Added | CVSS | Ransomware |
|---|---|---|---|---|
| CVE-2025-22226 | ESXi, Workstation, and Fusion | 2025-03-04 | 6.0 | – |
| CVE-2025-22225 | ESXi | 2025-03-04 | 8.2 | Known |
| CVE-2025-22224 | ESXi and Workstation | 2025-03-04 | 8.2 | – |
| CVE-2024-38813 | vCenter Server | 2024-11-20 | 9.8 | – |
| CVE-2024-38812 | vCenter Server | 2024-11-20 | 9.8 | – |
| CVE-2024-37085 | ESXi | 2024-07-30 | 7.2 | Known |
| CVE-2022-22948 | vCenter Server | 2024-07-17 | 6.5 | – |
| CVE-2023-34048 | vCenter Server | 2024-01-22 | 9.8 | – |
| CVE-2023-20867 | Tools | 2023-06-23 | 3.9 | – |
| CVE-2023-20887 | Aria Operations for Networks | 2023-06-22 | 9.8 | – |
| CVE-2022-22947 | Spring Cloud Gateway | 2022-05-16 | 10.0 | – |
| CVE-2022-22960 | Multiple Products | 2022-04-15 | 7.8 | – |
| CVE-2022-22954 | Workspace ONE Access and Identity Manager | 2022-04-14 | 9.8 | Known |
| CVE-2022-22965 | Spring Framework | 2022-04-04 | 9.8 | – |
| CVE-2018-6961 | SD-WAN Edge | 2022-03-25 | 8.1 | – |
| CVE-2021-21973 | vCenter Server and Cloud Foundation | 2022-03-07 | 5.3 | – |
| CVE-2021-21975 | vRealize Operations Manager API | 2022-01-18 | 7.5 | Known |
| CVE-2021-22017 | vCenter Server | 2022-01-10 | 5.3 | – |
| CVE-2021-22005 | vCenter Server | 2021-11-03 | 9.8 | Known |
| CVE-2021-21985 | vCenter Server | 2021-11-03 | 9.8 | Known |
| CVE-2021-21972 | vCenter Server | 2021-11-03 | 9.8 | Known |
| CVE-2020-4006 | Multiple Products | 2021-11-03 | 9.1 | – |
| CVE-2020-3992 | ESXi | 2021-11-03 | 9.8 | Known |
| CVE-2020-3952 | vCenter Server | 2021-11-03 | 9.8 | – |
| CVE-2020-3950 | Multiple Products | 2021-11-03 | 7.8 | – |
| CVE-2019-5544 | VMware ESXi and Horizon DaaS | 2021-11-03 | 9.8 | Known |