Vmware Velocloud Orchestrator — known CVE vulnerabilities

Every CVE whose affected-product data names Vmware Velocloud Orchestrator, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (2)

• CVE-2020-3973 — CVSS 8.8 (high): The VeloCloud Orchestrator does not apply correct input validation which allows for blind SQL-injection. A malicious actor with tenant…
• CVE-2026-31431 — CVSS 7.8 (high) — actively exploited: In the Linux kernel, the following vulnerability has been resolved: crypto: algif_aead - Revert to operating out-of-place This mostly…