CVE-2016-2081: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in VMware vRealize Log Insight 2.x and 3.x before 3.3.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2016-2082: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in VMware vRealize Log Insight 2.x and 3.x before 3.3.2 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...

PT-2016-5006

Name of the Vulnerable Software and Affected Versions VMware vRealize Log Insight versions 2.x through 3.x before 3.3.2 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Recommendations For versions 2.x through 3.x...

PT-2016-5007

Name of the Vulnerable Software and Affected Versions VMware vRealize Log Insight versions 2.x through 3.x before 3.3.2 Description A cross-site request forgery CSRF issue allows remote attackers to hijack the authentication of victims via unknown vectors. Recommendations For versions 2.x through...

VMware vRealize Log Insight Detection (SSH Login)

SSH login-based detection of VMware vRealize Log Insight. Copyright C 2016 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you...

VMware vRealize Automation Web UI Detection

Binary data vmwarevrealizeautomationwebuidetect.nbin...

VMware vRealize Business Unspecified Stored XSS (VMSA-2016-0003)

The version of VMware vRealize Business running on the remote host is 8.x prior to 8.2.5. It is, therefore, affected by a stored cross-site scripting vulnerability due to improper validation of user-supplied input. An authenticated, remote attacker can exploit this issue, via a specially crafted...

CVE-2016-2075

Cross-site scripting XSS vulnerability in VMware vRealize Business Advanced and Enterprise 8.x before 8.2.5 on Linux allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...

CVE-2016-2075

Cross-site scripting XSS vulnerability in VMware vRealize Business Advanced and Enterprise 8.x before 8.2.5 on Linux allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...

Cross site scripting

Cross-site scripting XSS vulnerability in VMware vRealize Automation 6.x before 6.2.4 on Linux allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...

CVE-2016-2075

Cross-site scripting XSS vulnerability in VMware vRealize Business Advanced and Enterprise 8.x before 8.2.5 on Linux allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...

VMware vRealize Automation Cross-Site Scripting Vulnerability

VMware vRealize Automation is a suite of cloud automation software from VMware. The software supports automated delivery of personalized infrastructure, deployment across multi-vendor, hybrid cloud infrastructures, simplified application release automation and continuous delivery. A cross-site...

VMware vRealize Business Advanced and Enterprise Cross-Site Scripting Vulnerability

VMware vRealize Business formerly known as IT Business Management Suite is a tool from VMware that can be used to visualize and control the cost of cloud computing environments and IT services. The tool provides cloud business management, IT financial management, and service quality management...

CVE-2016-2075: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in VMware vRealize Business Advanced and Enterprise 8.x before 8.2.5 on Linux allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...

CVE-2015-2344: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in VMware vRealize Automation 6.x before 6.2.4 on Linux allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...

PT-2016-3600

Name of the Vulnerable Software and Affected Versions VMware vRealize Automation versions prior to 6.2.4 Description A cross-site scripting XSS issue allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors. Recommendations For versions prior to 6.2.4, upda...

PT-2016-5002

Name of the Vulnerable Software and Affected Versions VMware vRealize Business Advanced and Enterprise versions prior to 8.2.5 Description A cross-site scripting XSS issue allows remote authenticated users to inject arbitrary web script or HTML. This can be done via unspecified vectors, potential...

VMware vRealize Orchestrator Arbitrary Command Execution Vulnerability

VMware vRealize Orchestrator is a suite of IT process automation engines for integrating with VMware vCloud Suite components to align and extend service delivery and operations management. VMware vRealize Orchestrator 6.x, vCenter Orchestrator 5.x, vRealize Operations 6.x, vCenter Operations...

PT-2015-7412

Name of the Vulnerable Software and Affected Versions VMware vRealize Orchestrator versions 6.x vCenter Orchestrator versions 5.x vRealize Operations versions 6.x vCenter Operations versions 5.x vCenter Application Discovery Manager vADM versions 7.x Description The issue allows remote attackers ...

CVE-2015-6934: Improper Input Validation

Serialized-object interfaces in VMware vRealize Orchestrator 6.x, vCenter Orchestrator 5.x, vRealize Operations 6.x, vCenter Operations 5.x, and vCenter Application Discovery Manager vADM 7.x allow remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the...