ACTIVELY EXPLOITED
CVE-2022-22948: VMware vCenter Server Incorrect Default File Permissions Vulnerability
| Vendor | VMware |
|---|---|
| Product | vCenter Server |
| Actively exploited | Yes |
| Added to CISA KEV | 17 Jul 2024 |
| CISA federal deadline | 7 Aug 2024 |
| Weakness (CWE) | CWE-276 |
Required action (CISA's text)
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Description (NVD)
VMware vCenter Server contains an incorrect default file permissions vulnerability that allows a remote, privileged attacker to gain access to sensitive information.
SOURCES
Other VMware flaws
- CVE-2025-22226: VMware ESXi, Workstation, and Fusion Information Disclosure Vulnerability
- CVE-2025-22225: VMware ESXi Arbitrary Write Vulnerability
- CVE-2025-22224: VMware ESXi and Workstation TOCTOU Race Condition Vulnerability
- CVE-2024-38813: VMware vCenter Server Privilege Escalation Vulnerability
- CVE-2024-38812: VMware vCenter Server Heap-Based Buffer Overflow Vulnerability
Data from NVD, CISA KEV, FIRST EPSS and vendor advisories. Updated 10 Nov 2026.