CVEs
Every published CVE. Without a filter the list holds those exploited, with a public check, or likely to be exploited; pick a year and month or a vendor for the rest.
| CVE | Vendor · product | Exploitation | CVSS | EPSS | Published |
|---|---|---|---|---|---|
| CVE-2020-3984The SD-WAN Orchestrator 3.3.2 prior to 3.3.2 P3 and 3.4.x prior to 3.4.4 does not apply correct input validation which allows for SQL-injection. An authenticated SD-WAN Orchestrat… | Vmware · VMware SD-WAN Orchestrator | Likely | – | 22% | 2020-11-24 |
| CVE-2024-38814An authenticated SQL injection vulnerability in VMware HCX was privately reported to VMware. A malicious authenticated user with non-administrator privileges may be able to enter… | Vmware · VMware HCX | Likely | 8.8 | 15% | 2024-10-16 |
| CVE-2022-31659VMware Workspace ONE Access and Identity Manager contain a remote code execution vulnerability. A malicious actor with administrator and network access can trigger a remote code e… | Vmware · VMware Workspace ONE Access, Identity Manager and vRealize Automation | Possible | – | 3.0% | 2022-08-05 |
| CVE-2020-4003VMware SD-WAN Orchestrator 3.3.2 prior to 3.3.2 P3, 3.4.x prior to 3.4.4, and 4.0.x prior to 4.0.1 was found to be vulnerable to SQL-injection attacks allowing for potential infor… | Vmware · VMware SD-WAN Orchestrator | Possible | – | 1.2% | 2020-11-24 |
| CVE-2026-22730CVE-2026-22730: SQL Injection in Spring AI MariaDBFilterExpressionConverter | VMware · Spring AI | Unlikely | 8.8 | 0.6% | 2026-03-18 |
| CVE-2024-22280VMSA-2024-0017: VMware Aria Automation updates address SQL-injection vulnerability (CVE-2024-22280) | VMware · VMware Aria Automation | Unlikely | 8.5 | 0.5% | 2024-07-11 |
| CVE-2025-41233Description: VMware AVI Load Balancer contains an authenticated blind SQL Injection vulnerability. VMware has evaluated the severity of the issue to be in the Moderate severity ra… | VMware · Avi Load Balancer | Unlikely | 6.8 | 0.3% | 2025-06-12 |
Exploitation: exploited (CISA KEV), a public nuclei check, then EPSS: likely 10% or more, possible 1 to 10%, unlikely under 1%. Data as of 2026-11-15.