CVE-2021-22036

VMware vRealize Orchestrator 8.x prior to 8.6 contains an open redirect vulnerability due to improper path handling. A malicious actor may be able to redirect victim to an attacker controlled domain due to improper path handling in vRealize Orchestrator leading to sensitive information disclosure...

EUVD-2015-6868

Malware in sbrugna...

EUVD-2023-25034

Malicious code in bioql PyPI...

EUVD-2021-9205

Malicious code in bioql PyPI...

CVE-2023-20855

VMware vRealize Orchestrator contains an XML External Entity XXE vulnerability. A malicious actor, with non-administrative access to vRealize Orchestrator, may be able to use specially crafted input to bypass XML parsing restrictions leading to access to sensitive information or possible escalati...

PT-2023-1450

Name of the Vulnerable Software and Affected Versions VMware vRealize Orchestrator affected versions not specified Description The issue is related to an XML External Entity XXE vulnerability. A malicious actor with non-administrative access to vRealize Orchestrator may be able to use specially...

CVE-2023-20855

VMware vRealize Orchestrator contains an XML External Entity XXE vulnerability. A malicious actor, with non-administrative access to vRealize Orchestrator, may be able to use specially crafted input to bypass XML parsing restrictions leading to access to sensitive information or possible escalati...

CVE-2023-20855

VMware vRealize Orchestrator contains an XML External Entity XXE vulnerability. A malicious actor, with non-administrative access to vRealize Orchestrator, may be able to use specially crafted input to bypass XML parsing restrictions leading to access to sensitive information or possible escalati...

CVE-2023-20855: Improper Restriction of XML External Entity Reference

VMware vRealize Orchestrator contains an XML External Entity XXE vulnerability. A malicious actor, with non-administrative access to vRealize Orchestrator, may be able to use specially crafted input to bypass XML parsing restrictions leading to access to sensitive information or possible escalati...

VMware vRealize Orchestrator Information Disclosure

The vulnerability of the VMware vRealize Orchestrator platform for automating processes is related to the lack of protection for operational data. Exploiting this vulnerability can allow a malicious actor to disclose the protected information...

CSRF vulnerability and missing permission check in vmware-vrealize-orchestrator

vmware-vrealize-orchestrator 3.0 and earlier does not perform a permission check in an HTTP endpoint. This allows attackers with Overall/Read permission to send an HTTP POST request to an attacker-specified URL. Additionally, this HTTP endpoint does not require POST requests, resulting in a...

VMware vRealize Orchestrator Open Redirect Vulnerability

VMware vRealize Orchestrator is a modern workflow automation platform that simplifies and automates complex data center infrastructure processes VMware vRealize Orchestrator has an open redirection vulnerability that could be exploited by an attacker to redirect victims to an attacker-controlled...

CVE-2021-22036

VMware vRealize Orchestrator 8.x prior to 8.6 contains an open redirect vulnerability due to improper path handling. A malicious actor may be able to redirect victim to an attacker controlled domain due to improper path handling in vRealize Orchestrator leading to sensitive information disclosure...

Open redirect

VMware vRealize Orchestrator 8.x prior to 8.6 contains an open redirect vulnerability due to improper path handling. A malicious actor may be able to redirect victim to an attacker controlled domain due to improper path handling in vRealize Orchestrator leading to sensitive information disclosure...

CVE-2021-22036

VMware vRealize Orchestrator 8.x prior to 8.6 contains an open redirect vulnerability due to improper path handling. A malicious actor may be able to redirect victim to an attacker controlled domain due to improper path handling in vRealize Orchestrator leading to sensitive information disclosure...

CVE-2021-22036: Exposure of Sensitive Information to an Unauthorized Actor

VMware vRealize Orchestrator 8.x prior to 8.6 contains an open redirect vulnerability due to improper path handling. A malicious actor may be able to redirect victim to an attacker controlled domain due to improper path handling in vRealize Orchestrator leading to sensitive information disclosure...

PT-2021-7283

Name of the Vulnerable Software and Affected Versions VMware vRealize Orchestrator versions 8.x prior to 8.6 Description The issue is related to improper path handling, which may allow a malicious actor to redirect victims to an attacker-controlled domain, potentially leading to sensitive...

VMSA-2021-0023:VMware vRealize Orchestrator update addresses open redirect vulnerability

Advisory ID: VMSA-2021-0023.1 CVSSv3 Range: 6.5 Issue Date:2021-10-12 Updated On: 2021-10-13 CVEs: CVE-2021-22036 Synopsis: VMware vRealize Orchestrator update addresses open redirect vulnerability CVE-2021-22036 RSS Feed Download PDF Download Text File Share this page on social media: 1. Impacte...

VMware vRealize Orchestrator Arbitrary Command Execution Vulnerability

VMware vRealize Orchestrator is a suite of IT process automation engines for integrating with VMware vCloud Suite components to align and extend service delivery and operations management. VMware vRealize Orchestrator 6.x, vCenter Orchestrator 5.x, vRealize Operations 6.x, vCenter Operations...

PT-2015-7412

Name of the Vulnerable Software and Affected Versions VMware vRealize Orchestrator versions 6.x vCenter Orchestrator versions 5.x vRealize Operations versions 6.x vCenter Operations versions 5.x vCenter Application Discovery Manager vADM versions 7.x Description The issue allows remote attackers ...