CVE-2017-4926

VMware vCenter Server 6.5 prior to 6.5 U1 contains a vulnerability that may allow for stored cross-site scripting XSS. An attacker with VC user privileges can inject malicious java-scripts which will get executed when other VC users access the page...

CVE-2017-4921

VMware vCenter Server 6.5 prior to 6.5 U1 contains an insecure library loading issue that occurs due to the use of LDLIBRARYPATH variable in an unsafe manner. Successful exploitation of this issue may allow unprivileged host users to load a shared library that may lead to privilege escalation...

CVE-2017-4922

VMware vCenter Server 6.5 prior to 6.5 U1 contains an information disclosure issue due to the service startup script using world writable directories as temporary storage for critical information. Successful exploitation of this issue may allow unprivileged host users to access certain critical...

VMware vCenter Server DLL Load Local Elevation of Privilege Vulnerability

VMware vCenter Server is a suite of server and virtualization management software from VMware. The software provides a centralized platform for managing VMware vSphere environments, automating the implementation and delivery of virtual infrastructures. A local lift vulnerability exists in VMware...

Design/Logic Flaw

VMware vCenter Server 5.5, 6.0, 6.5 allows vSphere users with certain, limited vSphere privileges to use the VIX API to access Guest Operating Systems without the need to authenticate...

VMware vCenter Server Elevation of Privilege Vulnerability

VMware vCenter Server is a suite of server and virtualization management software from VMware. The software provides a centralized platform for managing VMware vSphere environments, automating the implementation and delivery of virtual infrastructures. A security vulnerability exists in VMware...

VMSA-2017-0013:VMware vCenter Server and Tools updates resolve multiple security vulnerabilities

VMSA-2017-0013 VMware vCenter Server and Tools updates resolve multiple security vulnerabilities VMware Security Advisory VMware Security Advisory Advisory ID: VMSA-2017-0013 VMware Security Advisory Severity: Moderate VMware Security Advisory Synopsis: VMware vCenter Server and Tools updates...

VMware vCenter Server 6.0.x < 6.0u3b / 6.5.x < 6.5c BlazeDS AMF3 RCE (VMSA-2017-0007)

The version of VMware vCenter Server installed on the remote host is 6.0.x prior to 6.0u3b or 6.5.x prior to 6.5c. It is, therefore, affected by a flaw in FlexBlazeDS when processing AMF3 messages due to allowing the instantiation of arbitrary classes when deserializing objects. An unauthenticate...

VMware vCenter Server BlazeDS Component Remote Code Execution Vulnerability

VMware vCenter Server is a suite of server and virtualization management software from VMware. The software provides a centralized platform for managing VMware vSphere environments, automating the implementation and delivery of virtual infrastructures. A remote code execution vulnerability exists...

Update Rollup 16 for Azure Site Recovery

Describes the fixes that are included in Update Rollup 16 for Azure Site Recovery.IntroductionThis article describes the fixes that are included in Update Rollup 16 for Azure Site Recovery for the following:Microsoft Azure Site Recovery Provider version 5.1.2150.0Microsoft Azure Site Recovery...

Design/Logic Flaw

The "Plug-in for VMware vCenter" in VCE Vision Intelligent Operations before 2.6.5 sends a cleartext HTTP response upon a request for the Settings screen, which allows remote attackers to discover the admin user password by sniffing the network...

CVE-2015-4057

The "Plug-in for VMware vCenter" in VCE Vision Intelligent Operations before 2.6.5 sends a cleartext HTTP response upon a request for the Settings screen, which allows remote attackers to discover the admin user password by sniffing the network...

CVE-2015-4057

The "Plug-in for VMware vCenter" in VCE Vision Intelligent Operations before 2.6.5 sends a cleartext HTTP response upon a request for the Settings screen, which allows remote attackers to discover the admin user password by sniffing the network...

CVE-2015-4057

CVE-2015-4057 affects VCE Vision Intelligent Operations prior to 2.6.5. The Plug-in for VMware vCenter exposes the admin password by returning a cleartext HTTP response when the Settings screen is requested, enabling network sniffing attacks to reveal credentials. The underlying issue is cleartex...

CVE-2016-6110

IBM Tivoli Storage Manager discloses unencrypted login credentials to Vmware vCenter that could be obtained by a local user...

CVE-2016-6110

IBM Tivoli Storage Manager discloses unencrypted login credentials to Vmware vCenter that could be obtained by a local user...

Design/Logic Flaw

IBM Tivoli Storage Manager discloses unencrypted login credentials to Vmware vCenter that could be obtained by a local user...

CVE-2016-6110

IBM Tivoli Storage Manager discloses unencrypted login credentials to Vmware vCenter that could be obtained by a local user...

IBM Spectrum Protect Client VM Backup INCLUDE.VMTSMVSS Option Credentials Disclosure

The version of IBM Spectrum Protect Client installed on the remote host is 7.1.x prior to 7.1.6.4. It is, therefore, affected by an information disclosure vulnerability due to the application exposing obfuscated VMware vCenter User ID and Password information during the VM backup process using th...

Update Rollup 8 for System Center 2012 R2 Virtual Machine Manager

Update Rollup 8 for System Center 2012 R2 Virtual Machine Manager Introduction This article describes the issues that are fixed in Update Rollup 8 UR8 for Microsoft System Center 2012 R2 Virtual Machine Manager. There are two updates available for System Center 2012 R2 Virtual Machine Manager: on...