What’s Vulnerable › Products
Active IQ Unified Manager for VMware vSphere, Linux, and Microsoft Windows vulnerabilities
850 known vulnerabilities, 9 confirmed exploited in the wild (CISA KEV), 12 published in the last 12 months.
Exploited Active IQ Unified Manager for VMware vSphere, Linux, and Microsoft Windows vulnerabilities
- CVE-2025-0411 — 7-Zip Mark of the Web Bypass Vulnerability
- CVE-2020-11023 — JQuery Cross-Site Scripting (XSS) Vulnerability
- CVE-2023-41993 — Apple Multiple Products WebKit Code Execution Vulnerability
- CVE-2023-4863 — Google Chromium WebP Heap-Based Buffer Overflow Vulnerability
- CVE-2021-3156 — Sudo Heap-Based Buffer Overflow Vulnerability
- CVE-2017-12617 — Apache Tomcat Remote Code Execution Vulnerability
- CVE-2021-44228 — Apache Log4j2 Remote Code Execution Vulnerability
- CVE-2019-13272 — Linux Kernel Improper Privilege Management Vulnerability
- CVE-2018-11776 — Apache Struts Remote Code Execution Vulnerability
Latest Active IQ Unified Manager for VMware vSphere, Linux, and Microsoft Windows vulnerabilities
- CVE-2025-30722 — (CVSS 6.8)
- CVE-2025-31672 — Apache POI: parsing OOXML based files (xlsx, docx, etc.), poi-ooxml could read unexpected data if underlying zip has duplicate zip entry names (CVSS 5.3)
- CVE-2025-24928 — (CVSS 7.7)
- CVE-2024-56171 — (CVSS 9.8)
- CVE-2025-26465 — Openssh: machine-in-the-middle attack if verifyhostkeydns is enabled (CVSS 6.8)
- CVE-2025-1181 — GNU Binutils ld elflink.c _bfd_elf_gc_mark_rsec memory corruption (CVSS 5.0)
- CVE-2025-1178 — GNU Binutils ld libbfd.c bfd_putl64 memory corruption (CVSS 5.6)
- CVE-2025-24970 — SslHandler doesn't correctly validate packets which can lead to native crash when using native SSLEngine (CVSS 7.5)
- CVE-2025-0411 — 7-Zip Mark of the Web Bypass Vulnerability (CVSS 7.0) — exploited
- CVE-2025-21502 — (CVSS 4.8)
- CVE-2025-21492 — (CVSS 4.9)
- CVE-2024-52533 — (CVSS 9.8)
- CVE-2024-50602 — (CVSS 5.9)
- CVE-2024-9823 — Jetty DOS vulnerability on DosFilter (CVSS 7.5)
- CVE-2024-47554 — Apache Commons IO: Possible denial of service attack on untrusted input to XmlStreamReader (CVSS 4.3)
- CVE-2024-47561 — Apache Avro Java SDK: Arbitrary Code Execution when reading Avro schema (Java SDK) (CVSS 7.3)
- CVE-2024-7254 — Stack overflow in Protocol Buffers Java Lite (CVSS 7.5)
- CVE-2024-8096 — OCSP stapling bypass with GnuTLS (CVSS 6.5)
- CVE-2024-8373 — AngularJS improper sanitization in '<source>' element (CVSS 4.3)
- CVE-2024-8372 — AngularJS improper sanitization in 'srcset' attribute (CVSS 4.3)
- CVE-2024-6119 — Possible denial of service in X.509 name checks (CVSS 7.5)
- CVE-2024-38808 — CVE-2024-38808: Spring Expression DoS Vulnerability (CVSS 4.3)
- CVE-2024-21147 — (CVSS 7.4)
- CVE-2024-21140 — (CVSS 4.8)
- CVE-2024-21138 — (CVSS 3.7)