# Vmware Vcenter Server


- [CVE-2026-59310](https://insights.sbomify.com/CVE-2026-59310/): Broadcom VMware vCenter Path Traversal (critical 9.8, exploited in the wild)
- [CVE-2024-38812](https://insights.sbomify.com/CVE-2024-38812/): VMware vCenter Server Heap-Based Buffer Overflow (critical 9.8, exploited in the wild)
- [CVE-2024-37079](https://insights.sbomify.com/CVE-2024-37079/): Broadcom VMware vCenter Server Out-of-bounds Write (critical 9.8, exploited in the wild)
- [CVE-2023-34048](https://insights.sbomify.com/CVE-2023-34048/): VMware vCenter Server Out-of-Bounds Write (critical 9.8, exploited in the wild)
- [CVE-2021-22005](https://insights.sbomify.com/CVE-2021-22005/): VMware vCenter Server File Upload (critical 9.8, exploited in the wild)
- [CVE-2021-21985](https://insights.sbomify.com/CVE-2021-21985/): VMware vCenter Server Improper Input Validation (critical 9.8, exploited in the wild)
- [CVE-2021-21972](https://insights.sbomify.com/CVE-2021-21972/): VMware vCenter Server Remote Code Execution (critical 9.8, exploited in the wild)
- [CVE-2020-3952](https://insights.sbomify.com/CVE-2020-3952/): VMware vCenter Server Information Disclosure (critical 9.8, exploited in the wild)
- [CVE-2024-38813](https://insights.sbomify.com/CVE-2024-38813/): VMware vCenter Server Privilege Escalation (high 7.5, exploited in the wild)
- [CVE-2022-22948](https://insights.sbomify.com/CVE-2022-22948/): VMware vCenter Server Incorrect Default File Permissions Vulnerability (medium 6.5, exploited in the wild)
- [CVE-2021-22017](https://insights.sbomify.com/CVE-2021-22017/): VMware vCenter Server Improper Access Control (medium 5.3, exploited in the wild)
- [CVE-2021-21973](https://insights.sbomify.com/CVE-2021-21973/): VMware vCenter Server and Cloud Foundation Server Side Request Forgery (SSRF) (medium 5.3, exploited in the wild)

---
From sbomify Insights: https://insights.sbomify.com/products/vmware/vcenter-server/