Lucene search

[email protected]NVD:CVE-2016-7458

HistoryDec 29, 2016 - 9:59 a.m.

CVE-2016-7458

2016-12-2909:59:00

CWE-611

[email protected]

web.nvd.nist.gov

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

CVSS3

5.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N

AI Score

5.7

Confidence

High

EPSS

0.001

Percentile

50.9%

JSON

VMware vSphere Client 5.5 before U3e and 6.0 before U2a allows remote vCenter Server and ESXi instances to read arbitrary files via an XML document containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.

Affected configurations

Nvd

Node

vmwarevsphere_clientMatch5.5

vmwarevsphere_clientMatch5.5u1

vmwarevsphere_clientMatch5.5u2

vmwarevsphere_clientMatch5.5u3a

vmwarevsphere_clientMatch5.5u3b

vmwarevsphere_clientMatch6.0

vmwarevsphere_clientMatch6.02

vmwarevsphere_clientMatch6.02m

vmwarevsphere_clientMatch6.0a

vmwarevsphere_clientMatch6.0b

vmwarevsphere_clientMatch6.0u1

vmwarevsphere_clientMatch6.0u1b

VendorProductVersionCPE
vmwarevsphere_client5.5cpe:2.3:a:vmware:vsphere_client:5.5:*:*:*:*:*:*:*
vmwarevsphere_client5.5cpe:2.3:a:vmware:vsphere_client:5.5:u1:*:*:*:*:*:*
vmwarevsphere_client5.5cpe:2.3:a:vmware:vsphere_client:5.5:u2:*:*:*:*:*:*
vmwarevsphere_client5.5cpe:2.3:a:vmware:vsphere_client:5.5:u3a:*:*:*:*:*:*
vmwarevsphere_client5.5cpe:2.3:a:vmware:vsphere_client:5.5:u3b:*:*:*:*:*:*
vmwarevsphere_client6.0cpe:2.3:a:vmware:vsphere_client:6.0:*:*:*:*:*:*:*
vmwarevsphere_client6.0cpe:2.3:a:vmware:vsphere_client:6.0:2:*:*:*:*:*:*
vmwarevsphere_client6.0cpe:2.3:a:vmware:vsphere_client:6.0:2m:*:*:*:*:*:*
vmwarevsphere_client6.0cpe:2.3:a:vmware:vsphere_client:6.0:a:*:*:*:*:*:*
vmwarevsphere_client6.0cpe:2.3:a:vmware:vsphere_client:6.0:b:*:*:*:*:*:*

Vendor	Product	Version	CPE
vmware	vsphere_client	5.5	cpe:2.3:a:vmware:vsphere_client:5.5:::::::*
vmware	vsphere_client	5.5	cpe:2.3:a:vmware:vsphere_client:5.5:u1::::::
vmware	vsphere_client	5.5	cpe:2.3:a:vmware:vsphere_client:5.5:u2::::::
vmware	vsphere_client	5.5	cpe:2.3:a:vmware:vsphere_client:5.5:u3a::::::
vmware	vsphere_client	5.5	cpe:2.3:a:vmware:vsphere_client:5.5:u3b::::::
vmware	vsphere_client	6.0	cpe:2.3:a:vmware:vsphere_client:6.0:::::::*
vmware	vsphere_client	6.0	cpe:2.3:a:vmware:vsphere_client:6.0:2::::::
vmware	vsphere_client	6.0	cpe:2.3:a:vmware:vsphere_client:6.0:2m::::::
vmware	vsphere_client	6.0	cpe:2.3:a:vmware:vsphere_client:6.0:a::::::
vmware	vsphere_client	6.0	cpe:2.3:a:vmware:vsphere_client:6.0:b::::::

Rows per page:

1-10 of 121

References

www.securityfocus.com/bid/94483

www.securitytracker.com/id/1037328

www.vmware.com/security/advisories/VMSA-2016-0022.html

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

CVSS3

5.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N

AI Score

5.7

Confidence

High

EPSS

0.001

Percentile

50.9%

JSON

Related for NVD:CVE-2016-7458

cvelist1 cve1 ptsecurity1 prion1 nessus1 vmware1 openvas2