2 matches found
CVE-2020-3956: Improper Neutralization of Special Elements used in an Expression Language Statement
VMware Cloud Director 10.0.x before 10.0.0.2, 9.7.0.x before 9.7.0.5, 9.5.0.x before 9.5.0.6, and 9.1.0.x before 9.1.0.4 do not properly handle input leading to a code injection vulnerability. An authenticated actor may be able to send malicious traffic to VMware Cloud Director which may lead to...
8.8CVSS8.6AI score0.211EPSS
SaveExploits11References2
PT-2020-3052
Name of the Vulnerable Software and Affected Versions VMware Cloud Director versions 9.1.0.x through 9.1.0.3 VMware Cloud Director versions 9.5.0.x through 9.5.0.5 VMware Cloud Director versions 9.7.0.x through 9.7.0.4 VMware Cloud Director versions 10.0.x through 10.0.0.1 Description The issue i...
9CVSS0.211EPSS
SaveExploits11References19
20