Vulnerabilities > Vmware > APP Volumes

DATE CVE VULNERABILITY TITLE RISK
2021-06-23 CVE-2021-21999 Uncontrolled Search Path Element vulnerability in VMWare APP Volumes, Remote Console and Tools
VMware Tools for Windows (11.x.y prior to 11.2.6), VMware Remote Console for Windows (12.x prior to 12.0.1) , VMware App Volumes (2.x prior to 2.18.10 and 4 prior to 2103) contain a local privilege escalation vulnerability.
local
low complexity
vmware CWE-427
7.8
2020-08-21 CVE-2020-3975 Cross-site Scripting vulnerability in VMWare APP Volumes
VMware App Volumes 2.x prior to 2.18.6 and VMware App Volumes 4 prior to 2006 contain a Stored Cross-Site Scripting (XSS) vulnerability.
network
low complexity
vmware CWE-79
5.4