Cross-Site Request Forgery

Every one of the 9 is a mark on the map. Named now: 1 to 9, most at risk first.

1. Cross-site request forgery (CSRF) vulnerability in VMware vShield Manager (vSM) 1.0.1 before Update 2 and 4.1.0 before Update 2 allows remote attackers to hijack the authenticatio…CVE-2012-1514Vmware · 1.3% likely

   CWE-352

2. Cross-site request forgery (CSRF) vulnerability in VMware vCloud Director 5.1.x before 5.1.3 allows remote attackers to hijack the authentication of arbitrary users for requests t…CVE-2014-1211Vmware · 1.3% likely

   CWE-352

3. The flash-based vSphere Web Client (6.0 prior to 6.0 U3c and 5.5 prior to 5.5 U3f) i.e. not the new HTML5-based vSphere Client, contains SSRF and CRLF injection issues due to impr…CVE-2017-4928VMware · 1.2% likely

   CWE-352

4. VMware AirWatch Console (9.2.x before 9.2.2 and 9.1.x before 9.1.5) contains a Cross Site Request Forgery vulnerability when accessing the App Catalog. An attacker may exploit thi…CVE-2017-4951VMware · 0.8% likely

   CWE-352

5. Cross-site request forgery (CSRF) vulnerability in springframework-social before 1.1.3.CVE-2015-5258Vmware · 0.8% likely

   CWE-352

6. Cross-site request forgery (CSRF) vulnerability in VMware vRealize Log Insight 2.x and 3.x before 3.3.2 allows remote attackers to hijack the authentication of unspecified victims…CVE-2016-2082Vmware · 0.6% likely

   CWE-352

7. VMware Workspace ONE Access, Identity Manager and vRealize Automation contain a cross site request forgery vulnerability. A malicious actor can trick a user through a cross site r…CVE-2022-22959Vmware · 0.5% likely

   CWE-352

8. VMware vRealize Operations (vROps) contains a CSRF bypass vulnerability. A malicious user could execute actions on the vROps platform on behalf of the authenticated victim user.CVE-2023-20856Vmware · CVSS 8.8 · 0.4% likely

   CWE-352

9. Spring Framework STOMP CSRF VulnerabilityCVE-2025-41254VMware · CVSS 4.3 · 0.3% likely

   CWE-352

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.