vulnerabilities detected for vCenter server appliance by security scanner tool for vCenter Server 8.0 U3.

Products

• VMware vCenter Server

Issue/Introduction

When running a security scan against vCenter Server 8.0 Update 3 the following CVEs might be reported:

• CVE-2024-8805
• CVE-2024-9143
• CVE-2024-12133
• CVE-2025-26465

 

Environment

VMware vCenter Server 8.0.3

Cause

Below are affected packages in vcsa 8 U3 (photon OS 4)

current VC's package version : linux-5.10.219-3.ph4.x86_64
current VC's package Version : openssh-8.9p1-8.ph4.x86_64
Current vC's Version : libtasn1-4.14-2.ph4.x86_64
Current vC's Version : openssl-3.0.13-2.ph4.x86_64

Resolution

This has been fixed in VMware vCenter Server 8.0 Update 3g (build 24853646), released on July 29, 2025