PT-2012-6264

Name of the Vulnerable Software and Affected Versions VMware vCenter Server Appliance vCSA versions 5.0 before Update 2 VMware vCenter Server Appliance vCSA versions 5.1 before Patch 1 Description A directory traversal issue allows remote authenticated users to read arbitrary files via unspecifie...

VMware vCenter Data Collection

Binary data vmwarevcentercollect.nbin...

VMware vCenter SOAP API Settings

Binary data vmwarevcentersettings.nbin...

Cross site scripting

Cross-site scripting XSS vulnerability in the server in VMware vCenter Operations aka vCOps before 5.0.x allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2012-5050

Cross-site scripting XSS vulnerability in the server in VMware vCenter Operations aka vCOps before 5.0.x allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2012-5050: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the server in VMware vCenter Operations aka vCOps before 5.0.x allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

PT-2012-5728

Name of the Vulnerable Software and Affected Versions VMware vCenter Operations versions prior to 5.0.x Description A cross-site scripting XSS issue exists, allowing remote attackers to inject arbitrary web script or HTML. Recommendations For versions prior to 5.0.x, update to version 5.0.x or...

CVE-2012-1513: Exposure of Sensitive Information to an Unauthorized Actor

The Web Configuration tool in VMware vCenter Orchestrator vCO 4.0 before Update 4, 4.1 before Update 2, and 4.2 before Update 1 places the vCenter Server password in an HTML document, which allows remote authenticated administrators to obtain sensitive information by reading this document...

CVE-2012-1472

VMware vCenter Chargeback Manager aka CBM before 2.0.1 does not properly handle XML API requests, which allows remote attackers to read arbitrary files or cause a denial of service via unspecified vectors...

PT-2012-3297

Name of the Vulnerable Software and Affected Versions VMware vCenter Chargeback Manager version 2.0.0 and earlier Description The issue is related to the improper handling of XML API requests. This allows remote attackers to read arbitrary files or cause a denial of service. Recommendations For...

CVE-2012-1472: Improper Input Validation

VMware vCenter Chargeback Manager aka CBM before 2.0.1 does not properly handle XML API requests, which allows remote attackers to read arbitrary files or cause a denial of service via unspecified vectors...

VMware vCenter Update Manager Directory Traversal (VMSA-2011-0014)

The version of Jetty web server included with VMware vCenter Update Manager on the remote host has a directory traversal vulnerability. This is a variant of the issue previously addressed by VMware advisory VMSA-2010-0012. The web server runs as SYSTEM by default. A remote, unauthenticated attack...

VMware vCenter Update Manager Detection

VMware vCenter Update Manager also known as vSphere Update Manager was detected on the remote host. This application is used to manage patches on vSphere hosts. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid56957; scriptversion"1.5"; scriptcvsdate"Date: 2019/11/22";...

Jetty Web server / VMware vCenter directory traversal

No description provided...

CVE-2011-4404

The default configuration of the HTTP server in Jetty in vSphere Update Manager in VMware vCenter Update Manager 4.0 before Update 4 and 4.1 before Update 2 allows remote attackers to conduct directory traversal attacks and read arbitrary files via unspecified vectors, a related issue to...

CVE-2011-4404

The default configuration of the HTTP server in Jetty in vSphere Update Manager in VMware vCenter Update Manager 4.0 before Update 4 and 4.1 before Update 2 allows remote attackers to conduct directory traversal attacks and read arbitrary files via unspecified vectors, a related issue to...

Directory traversal

The default configuration of the HTTP server in Jetty in vSphere Update Manager in VMware vCenter Update Manager 4.0 before Update 4 and 4.1 before Update 2 allows remote attackers to conduct directory traversal attacks and read arbitrary files via unspecified vectors, a related issue to...

CVE-2011-4404

The default configuration of the HTTP server in Jetty in vSphere Update Manager in VMware vCenter Update Manager 4.0 before Update 4 and 4.1 before Update 2 allows remote attackers to conduct directory traversal attacks and read arbitrary files via unspecified vectors, a related issue to...

CVE-2011-4404: Undefined Security Weakness

The default configuration of the HTTP server in Jetty in vSphere Update Manager in VMware vCenter Update Manager 4.0 before Update 4 and 4.1 before Update 2 allows remote attackers to conduct directory traversal attacks and read arbitrary files via unspecified vectors, a related issue to...

VMware vCenter产品JRE多个安全漏洞

VMware vCenter是VMware vSphere套件中一个强大的主机和虚拟机集中管理组件。 多个VMware vCenter产品在实现上存在多个漏洞，可被本地恶意用户利用泄露敏感信息、操作某些数据、绕过某些安全限制、执行欺骗攻击、执行DNS投毒攻击。 VMWare VirtualCenter 2.x VMWare vCenter Server 4.x VMWare vCenter Update Manager 4.x 厂商补丁： VMWare ------ 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.vmware.com...