CVE-2024-22274Published

The vCenter Server contains an authenticated remote code execution vulnerability. A malicious actor with administrative privileges on the vCenter appliance shell may exploit this issue to run arbitrary commands on the underlying operating s…

Exact source revision recorded 23 Oct 2026 15:48:27 UTC. It does not establish the source's current position. Latest evidence.

Recorded JSON

cve-program · CVE-2024-22274

Published

VMware vCenter Server

Vendor product

Original vendor version evidence · not evaluated as a NuGet range

{
                    "defaultStatus": "unaffected",
                    "product": "VMware vCenter Server",
                    "vendor": "n/a",
                    "versions": [
                        {
                            "lessThan": "8.0 U2b",
                            "status": "affected",
                            "version": "8.0",
                            "versionType": "custom"
                        },
                        {
                            "lessThan": "7.0 U3q",
                            "status": "affected",
                            "version": "7.0",
                            "versionType": "custom"
                        }
                    ]
                }

VMware Cloud Foundation (vCenter Server)

Vendor product

Original vendor version evidence · not evaluated as a NuGet range

{
                    "defaultStatus": "unaffected",
                    "product": "VMware Cloud Foundation (vCenter Server)",
                    "vendor": "n/a",
                    "versions": [
                        {
                            "lessThan": "5.1.1",
                            "status": "affected",
                            "version": "5.x",
                            "versionType": "custom"
                        },
                        {
                            "status": "affected",
                            "version": "4.x"
                        }
                    ]
                }