VMware studio vulnerabilities

Latest VMware studio CVEs

Newest publication first

1. CVE-2010-2667 Multiple unspecified vulnerabilities in the Virtual Appliance Management Infrastructure (VAMI) in VMware Studio 2.0 allow remote authenticated users to execute arbitrary commands via vectors involving...

   Published 2010-07-22

   Medium·CVSS 6.0

   Multiple unspecified vulnerabilities in the Virtual Appliance Management Infrastructure (VAMI) in VMware Studio 2.0 allow remote authenticated users to execute arbitrary commands via vectors involving (1) the Studio virtual appliance or (2) a virtual appliance created by the Stud...

2. CVE-2010-2427 VMware Studio 2.0 does not properly write to temporary files, which allows local users to gain privileges via unspecified vectors.

   Published 2010-07-22

   Medium·CVSS 4.4

   VMware Studio 2.0 does not properly write to temporary files, which allows local users to gain privileges via unspecified vectors.

3. CVE-2009-2968 Directory traversal vulnerability in a support component in the web interface in VMware Studio 2.0 public beta before build 1017-185256 allows remote attackers to upload files to arbitrary locations v...

   Published 2009-09-02

   Medium·CVSS 5.0

   Directory traversal vulnerability in a support component in the web interface in VMware Studio 2.0 public beta before build 1017-185256 allows remote attackers to upload files to arbitrary locations via unspecified vectors.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.