vCenter Server 7.0 vulnerabilities
4 advisories affect VMware vCenter Server 7.0, 4 already exploited by attackers. Latest: November 20, 2024.
Running vCenter Server 7.0 devices? Get an email when a new vulnerability comes out. Free, unsubscribe in one click.
Turn on vCenter Server 7.0 alerts
Turn on vCenter Server 7.0 alerts
| Vulnerability | Severity | Affected versions |
|---|---|---|
| VMware vCenter Server Heap-Based Buffer Overflow Vulnerability CVE-2024-38812 · November 20, 2024 | Critical 9.8 Exploited | 7.0 GA – 7.0 Update 3s |
| VMware vCenter Server Privilege Escalation Vulnerability CVE-2024-38813 · November 20, 2024 | High 7.5 Exploited | 7.0 GA – 7.0 Update 3s |
| VMware vCenter Server Incorrect Default File Permissions Vulnerability CVE-2022-22948 · July 17, 2024 | Medium 6.5 Exploited | VMware vCenter Server (7.0 prior to 7.0 U3d, 6.7 prior to 6.7 U3p and 6.5 prior to 6.5 U3r) and VMware Cloud Foundation (4.x and 3.x prior to 3.11) |
| VMware vCenter Server Out-of-Bounds Write Vulnerability CVE-2023-34048 · January 22, 2024 | Critical 9.8 Exploited | 7.0 GA – 7.0 Update 3n |
Affected versions are compiled automatically from vendor advisories and NVD and may contain errors. Where no fixed version is shown, you will find it in the official advisory linked from every page: check it there before updating.
Other vCenter Server versions: 8.0