What’s Vulnerable › Products

VMware SALT vulnerabilities

62 known vulnerabilities, 3 confirmed exploited in the wild (CISA KEV), 11 published in the last 12 months.

Check whether your VMware SALT version is affected

Exploited VMware SALT vulnerabilities

• CVE-2020-16846 — SaltStack Salt Shell Injection Vulnerability
• CVE-2020-11652 — SaltStack Salt Path Traversal Vulnerability
• CVE-2020-11651 — SaltStack Salt Authentication Bypass Vulnerability

Latest VMware SALT vulnerabilities

• CVE-2024-38824 — CVE-2024-38824 salt advisory (CVSS 7.5)
• CVE-2025-22242 — CVE-2025-22242 salt advisory (CVSS 5.6)
• CVE-2025-22241 — CVE-2025-22241 salt advisory (CVSS 5.6)
• CVE-2025-22240 — CVE-2025-22240 salt advisory (CVSS 6.3)
• CVE-2025-22239 — CVE-2025-22239 salt advisory (CVSS 8.1)
• CVE-2025-22238 — CVE-2025-22238 salt advisory (CVSS 4.2)
• CVE-2025-22237 — CVE-2025-22237 salt advisory (CVSS 6.7)
• CVE-2025-22236 — CVE-2025-22236 salt advisory (CVSS 8.1)
• CVE-2024-38825 — CVE-2024-38825 Salt Advisory (CVSS 6.4)
• CVE-2024-38823 — CVE-2024-38823 Salt Advisory (CVSS 2.7)
• CVE-2024-38822 — CVE-2024-38822 Salt Advisory (CVSS 2.7)
• CVE-2023-20898 — (CVSS 7.8)
• CVE-2023-20897 — (CVSS 5.3)
• CVE-2021-33226 — (CVSS 9.8)
• CVE-2022-22967 — (CVSS 8.8)
• CVE-2022-22941 — (CVSS 8.8)
• CVE-2022-22936 — (CVSS 8.8)
• CVE-2022-22935 — (CVSS 3.7)
• CVE-2022-22934 — (CVSS 8.8)
• CVE-2021-22004 — (CVSS 6.4)
• CVE-2021-21996 — (CVSS 7.5)
• CVE-2021-31607 — (CVSS 7.8)
• CVE-2021-25315 — salt-api unauthenticated remote code execution (CVSS 7.8)
• CVE-2021-3197 — (CVSS 9.8)
• CVE-2021-3148 — (CVSS 9.8)