Skip to content
NewCybercrime Report 2026 · Eight Chapters · A Post Is Not An Incident → Explore The ChaptersCybercrime Report 2026 → Explore
Request A Demo
Resources · Vulnerability Tracker

VMware Vulnerability Tracker.

This page holds short security alerts about vulnerabilities in VMware products. It covers 2 items from January 2023 to February 2023.

Entries
2
CVE IDs
3
Range
January 2023 to February 2023
Open The CVE Index → Read The Entries
01CVE Index

CVE Index. Sort, Filter, Open The Entry.

  • Critical
  • High
  • Not rated in entry
  • Exploitation reported
Product
Sort

Showing 3 of 3 · newest first

Weakness · Fix Exploitation
  1. CVE-2023-20858 Carbon Black App Control 8.7.x, 8.8.x, 8.9.x on Windows
    Weakness · Fix Improper validation of user-supplied input; arbitrary code execution from the management console Fix: Versions 8.9.4, 8.8.6 and 8.7.8
    Rating Critical CVSS 9.1
    Exploitation Not stated in entry
    24 February 2023 Read entry
  2. CVE-2022-31706 vRealize Log Insight
    Weakness · Fix Directory traversal and improper access restrictions; remote code execution Fix: Version 8.10.2
    Rating Critical
    Exploitation No findings of active exploitation
    25 January 2023 Read entry
  3. CVE-2022-31704 vRealize Log Insight
    Weakness · Fix Directory traversal and improper access restrictions; remote code execution Fix: Version 8.10.2
    Rating Critical
    Exploitation No findings of active exploitation
    25 January 2023 Read entry
02Entries

The Entries. Grouped By Quarter.

Each entry keeps its original title, publish date and text, newest first and grouped by quarter. Earlier addresses of these entries now lead to the matching entry here.

2023 Q1 2 entries
Published 24 February 2023

Critical Vulnerability Alert In VMware Carbon Black App Control

CVE-2023-20858

VMware has released updates that address a critical security vulnerability affecting the Carbon Black App Control platform used for enterprise security. VMware Carbon Black App Control is a security product used to ensure that only trusted and approved software can run on critical systems and endpoints.

The Vulnerability in VMware Carbon Black App Control Platform Has a 9.1 CVSS Score

The security vulnerability, identified as CVE-2023-20858, is caused by improper validation of user-supplied input. A remote user with privileged access to the App Control management console can execute arbitrary code on the target system through a specially crafted request.

The security vulnerability affects App Control 8.7.x, 8.8.x, and 8.9.x versions running on the Windows operating system and has been resolved with the release of versions 8.9.4, 8.8.6, and 8.7.8. Users of these versions that have not been updated are advised to apply the updates promptly to prevent potential exploitation.

VMware advisory VMSA-2023-0004
Published 25 January 2023

Critical RCE Alarm In VMware vRealize Log Insight

CVE-2022-31706CVE-2022-31704

VMware has released updates for four security vulnerabilities that could have allowed remote code execution in the VMware vRealize Log Insight solution. vRealize Log Insight is a log management tool that helps to collect, view and analyze logs from monitoring or network solutions.

The critical vulnerabilities, identified as CVE-2022-31706 and CVE-2022-31704, are caused by directory traversal errors and improper access restrictions.

The company has released version 8.10.2 of VMware vRealize Log Insight, which addresses these vulnerabilities. There have been no findings of active exploitation of these vulnerabilities. It is recommended that these updates be applied as soon as possible to prevent potential attacks.

VMware advisory VMSA-2023-0001
More Trackers
TrackerCisco Vulnerability Tracker TrackerZyxel Vulnerability Tracker TrackerApple Zero-Day Tracker ArchiveMicrosoft Patch Tuesday Archive ResourcesAll Resources
Brandefense logo

Know What Is Exposed. Before Attackers Do.

Book a demo of the platform.

  • 4.8Gartner Peer Insights
  • 24hEarly warning time
  • 190+Countries covered
What you see in the demo
  • 01Your exposureAssets and services seen from the outside, starting from your own domain.
  • 02Threats aimed at youLeaked credentials, look-alike domains and brand abuse in one view.
  • 03From alert to actionHow findings reach your team and what to do next.