Information Disclosure

Every one of the 45 is a mark on the map. Named now: 1 to 26, most at risk first.

1. VMware vRealize Log Insight < v8.10.2 - Information DisclosureCVE-2022-31711Vmware · CVSS 5.3 · 22% likely

   CWE-200

2. The virtual networking stack in VMware Workstation 7.0 before 7.0.1 build 227600, VMware Workstation 6.5.x before 6.5.4 build 246459 on Windows, VMware Player 3.0 before 3.0.1 bui…CVE-2010-1138Vmware · 2.3% likely

   CWE-200

3. DaoAuthenticationProvider in VMware SpringSource Spring Security before 2.0.8, 3.0.x before 3.0.8, and 3.1.x before 3.1.3 does not check the password if the user is not found, whi…CVE-2012-5055Vmware · 2.0% likely

   CWE-200

4. VMware vCenter Server (6.7.x prior to 6.7 U3, 6.5 prior to 6.5 U3 and 6.0 prior to 6.0 U3j) contains an information disclosure vulnerability due to the logging of credentials in p…CVE-2019-5532VMware · 1.9% likely

   CWE-532

5. VMware vCenter Server (6.5 prior to 6.5 U1) contains an information disclosure vulnerability. This issue may allow plaintext credentials to be obtained when using the vCenter Serv…CVE-2017-4923Vmware · 1.9% likely

   CWE-200

6. VMware VirtualCenter 2.5 before Update 2 and 2.0.2 before Update 5 relies on client-side "enabled/disabled functionality" for access control, which allows remote attackers to dete…CVE-2008-3514Vmware · 1.8% likely

   CWE-200

7. VMware vRealize Operations contains an information disclosure vulnerability. A low-privileged malicious actor with network access can create and leak hex dumps, leading to informa…CVE-2022-31673Vmware · CVSS 8.8 · 1.8% likely

   CWE-200

8. VMware vCenter Server (6.7.x prior to 6.7 U3, 6.5 prior to 6.5 U3 and 6.0 prior to 6.0 U3j) contains an information disclosure vulnerability where Virtual Machines deployed from a…CVE-2019-5534VMware · 1.6% likely

   CWE-200

9. MySQL for PCF tiles 1.7.x before 1.7.10 were discovered to log the AWS access key in plaintext. These credentials were logged to the Service Backup component logs, and not the sys…CVE-2016-0898Vmware · 1.4% likely

   CWE-532

10. VMware vCenter Server (6.5 prior to 6.5 U1) contains an information disclosure issue due to the service startup script using world writable directories as temporary storage for cr…CVE-2017-4922Vmware · 1.3% likely

    CWE-200

11. The Web Configuration tool in VMware vCenter Orchestrator (vCO) 4.0 before Update 4, 4.1 before Update 2, and 4.2 before Update 1 places the vCenter Server password in an HTML doc…CVE-2012-1513Vmware · 1.2% likely

    CWE-200

12. VMware NSX Edge 6.1 before 6.1.7 and 6.2 before 6.2.3 and vCNS Edge 5.5 before 5.5.4.3, when the SSL-VPN feature is configured, allow remote attackers to obtain sensitive informat…CVE-2016-2079Vmware · 1.1% likely

    CWE-200

13. In Spring Cloud OpenFeign 3.0.0 to 3.0.4, 2.2.0.RELEASE to 2.2.9.RELEASE, and older unsupported versions, applications using type-level `@RequestMapping`annotations over Feign cli…CVE-2021-22044Vmware · 1.1% likely

    CWE-200

14. The vRealize Operations Manager API (8.x prior to 8.5) contains an arbitrary log-file read vulnerability. An unauthenticated malicious actor with network access to the vRealize Op…CVE-2021-22024Vmware · 1.0% likely

    CWE-532

15. The vCenter Server contains a partial file read vulnerability. A malicious actor with administrative privileges on the vCenter appliance shell may exploit this issue to partially…CVE-2024-22275Vmware · CVSS 4.9 · 1.0% likely

    CWE-200

16. VMware vCenter Server Appliance (vCSA) 5.0 before Update 2 does not properly parse XML documents, which allows remote authenticated users to read arbitrary files via unspecified v…CVE-2012-6325Vmware · 0.9% likely

    CWE-200

17. AirWatch by VMware On-Premise 7.3.x before 7.3.3.0 (FP3) allows remote authenticated users to obtain the organizational information and statistics from arbitrary tenants via vecto…CVE-2014-8372Vmware · 0.9% likely

    CWE-200

18. VMware vRealize Orchestrator ((8.x prior to 8.6) contains an open redirect vulnerability due to improper path handling. A malicious actor may be able to redirect victim to an atta…CVE-2021-22036Vmware · 0.9% likely

    CWE-200

19. VMware Workspace ONE Access, Identity Manager and vRealize Automation contain an information disclosure vulnerability due to returning excess information. A malicious actor with r…CVE-2022-22961Vmware · 0.8% likely

    CWE-200

20. VMware Cloud Foundation contains an information disclosure vulnerability due to logging of credentials in plain-text within multiple log files on the SDDC Manager. A malicious act…CVE-2022-22939Vmware · 0.8% likely

    CWE-532

21. In Spring Data REST versions 3.4.0 - 3.4.13, 3.5.0 - 3.5.5, and older unsupported versions, HTTP resources implemented by custom controllers using a configured base API path and a…CVE-2021-22047Vmware · 0.8% likely

    CWE-200

22. VMware vCenter Server Partial Information Disclosure VulnerabilityCVE-2023-34056VMware · CVSS 4.3 · 0.8% likely

    CWE-922

23. Username enumeration vulnerabilityCVE-2025-41252VMware · CVSS 7.5 · 0.7% likely

    CWE-203

24. VMware vRealize Operations contains an information disclosure vulnerability. A low-privileged malicious actor with network access can access log files that lead to information dis…CVE-2022-31674Vmware · CVSS 4.3 · 0.7% likely

    CWE-200

25. VMware Aria Operations for Logs information disclosure vulnerabilityCVE-2025-22218VMware · CVSS 8.5 · 0.7% likely

    CWE-209

26. In Spring Session version 3.0.0, the session id can be logged to the standard output stream. This vulnerability exposes sensitive information to those who have access to the appli…CVE-2023-20866Vmware · CVSS 6.5 · 0.7% likely

    CWE-200

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.