The vulnerability of the management tools for virtual infrastructure, such as VMware vCenter Server and VMware ESXi hypervisors, arises from the failure to address sequences of characters CRLF. This allows attackers to control the headers and bodies of HTTP responses, as well as execute cross-site scripting attacks and attacks on intermediate proxy servers.
🗓️ 05 Oct 2017 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType 
bdu_fstec🔗 bdu.fstec.ru👁 8 Views
| Reporter | Title | Published | Views | Family All 18 |
|---|---|---|---|---|
 | VMware vCenter Server/ESXi CRLF Injection Vulnerability | 9 Aug 201600:00 | – | cnvd |
 | CVE-2016-5331 | 8 Aug 201601:00 | – | cve |
 | CVE-2016-5331 | 8 Aug 201601:00 | – | cvelist |
 | EUVD-2016-6282 | 7 Oct 202500:30 | – | euvd |
 | CVE-2016-5331 | 8 Aug 201601:59 | – | nvd |
 | VMware Security Updates for vCenter Server (VMSA-2016-0010) | 5 Aug 201600:00 | – | openvas |
| VMware ESXi product updates address multiple important security issues (VMSA-2016-0010) - Local Version Check | 5 Aug 201600:00 | – | openvas |
| VMware ESXi product updates address multiple important security issues (VMSA-2016-0010) - Remote Version Check | 5 Aug 201600:00 | – | openvas |
| VMware ESXi Multiple Vulnerabilities (VMSA-2016-0010) - Active Check | 8 Aug 201600:00 | – | openvas |
| VMware Security Updates for vCenter Server (VMSA-2016-0010) - Active Check | 8 Aug 201600:00 | – | openvas |
10
Node
OR
Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
23 Mar 2021 00:00Current
6.5Medium risk
Vulners AI Score6.5
CVSS 25.5
EPSS0.01906