CVE-2019-5514 - CVE House
Back to Database
Status published High CVE-2019-5514

VMware VMware Fusion (11.x before 11.0.3) contains a security vulnerability...

Vulnerability Description

VMware VMware Fusion (11.x before 11.0.3) contains a security vulnerability due to certain unauthenticated APIs accessible through a web socket. An attacker may exploit this issue by tricking the host user to execute a JavaScript to perform unauthorized functions on the guest machine where VMware Tools is installed. This may further be exploited to execute commands on the guest machines.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2019-5514

Credits & Attribution

No credits recorded in the NVD database.

References

More from VMware

View All →
CVE-2025-41254
Spring Framework STOMP CSRF Vulnerability
Medium 4.3
CVE-2025-41253
Spring Cloud Gateway Webflux SpEL Injection Vulnerability Allowing Exposure of Environment Variables
High 7.5
CVE-2025-41252
Username enumeration vulnerability
High 7.5
CVE-2025-41250
Header injection vulnerability
High 8.5
CVE-2025-41249
CVE-2025-41249: Spring Framework Annotation Detection Vulnerability
High 7.5

Affected Vendor

Affected Software

VMware Fusion
Vulnerable Versions:
11.x before 11.0.3

Timeline

Official Publish: April 1st, 2019
Last Modified: August 4th, 2024
Added to House: July 20th, 2026

CVSS Vectors

V3: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.