80 matches found
PT-2021-4314
Name of the Vulnerable Software and Affected Versions vCenter Server affected versions not specified Description The issue is related to insufficient input validation in the Analytics service of VMware vCenter Server and VMware Cloud Foundation, which can lead to a denial-of-service condition...
CVE-2021-22020: Undefined Security Weakness
The vCenter Server contains a denial-of-service vulnerability in the Analytics service. Successful exploitation of this issue may allow an attacker to create a denial-of-service condition on vCenter Server...
CVE-2021-22007: Undefined Security Weakness
The vCenter Server contains a local information disclosure vulnerability in the Analytics service. An authenticated user with non-administrative privilege may exploit this issue to gain access to sensitive information...
CVE-2021-22005: Improper Limitation of a Pathname to a Restricted Directory
The vCenter Server contains an arbitrary file upload vulnerability in the Analytics service. A malicious actor with network access to port 443 on vCenter Server may exploit this issue to execute code on vCenter Server by uploading a specially crafted file...
CVE-2021-22005
The vCenter Server contains an arbitrary file upload vulnerability in the Analytics service. A malicious actor with network access to port 443 on vCenter Server may exploit this issue to execute code on vCenter Server by uploading a specially crafted file. Recent assessments: wvu-r7 at September...
Drop everything and patch VMware’s vCenter Server Vulnerabilities
THREAT LEVEL: Green. For a detailed advisory, download the pdf file here. VMware has issued patches for 19 new vulnerabilities. CVE-2021-22005 is the worst of the lot, defined as "an arbitrary file upload vulnerability in the Analytics service" of the vCenter Server. An attacker with network acce...
VMware Warns of Critical File Upload Vulnerability Affecting vCenter Server
VMware on Tuesday published a new bulletin warning of as many as 19 vulnerabilities in vCenter Server and Cloud Foundation appliances that a remote attacker could exploit to take control of an affected system. The most urgent among them is an arbitrary file upload vulnerability in the Analytics...
VMware vCenter Server < 7.0 U2c Multiple Vulnerabilities (VMSA-2021-0020)
The version of VMware vCenter Server installed on the remote host is 7.0 prior to 7.0 U2c. It is, therefore, affected by multiple vulnerabilities: - An arbitrary file upload vulnerability exists in the analytics service of vSphere Server. An unauthenticated, remote attacker can exploit this to...
VMware vCenter Server input validation error vulnerability
Vmware VMware vCenter Server is a suite of server and virtualization management software from Vmware. The software provides a centralized platform for managing VMware vSphere environments that automates the implementation and delivery of virtual infrastructures. An input validation error...
PT-2021-4147
Name of the Vulnerable Software and Affected Versions VMware vCenter Server versions prior to the fixed version Description The vCenter Server contains an arbitrary file upload vulnerability in the Analytics service. A malicious actor with network access to port 443 on vCenter Server may exploit...
VMware vCenter Server information leakage vulnerability
Vmware VMware vCenter Server is a suite of server and virtualization management software from Vmware. The software provides a centralized platform for managing VMware vSphere environments, automating the implementation and delivery of virtual infrastructures. An information disclosure vulnerabili...
Web Analytics Service跨站脚本漏洞
No description provided by source...
Web Analytics Service Cross-Site Scripting Vulnerability
Web Analytics Service is a web analytics server. A cross-site scripting vulnerability exists in the JavaScript module of Web Analytics Service. This allows remote attackers to inject arbitrary web script or HTML code via unspecified vectors...
CVE-2015-7786
Cross-site scripting XSS vulnerability in the NTT DATA Smart Sourcing JavaScript module 2003-11-26 through 2013-07-09 for Web Analytics Service allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
Cross site scripting
Cross-site scripting XSS vulnerability in the NTT DATA Smart Sourcing JavaScript module 2003-11-26 through 2013-07-09 for Web Analytics Service allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2015-7786
Cross-site scripting XSS vulnerability in the NTT DATA Smart Sourcing JavaScript module 2003-11-26 through 2013-07-09 for Web Analytics Service allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2015-7786
CVE-2015-7786: Cross-site scripting in the NTT DATA Smart Sourcing JavaScript module used by Web Analytics Service (distributed 2003-11-26 to 2013-07-09). The vulnerability allows an attacker to inject arbitrary script/HTML via unspecified vectors. Affected component is the Web Analytics Service ...
CVE-2015-7786: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in the NTT DATA Smart Sourcing JavaScript module 2003-11-26 through 2013-07-09 for Web Analytics Service allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
Web Analytics Service vulnerable to cross-site scripting
Overview The JavaScript module for using Web Analytics Service which was provided by NTT DATA Smart Sourcing Corporation contains a cross-site scripting vulnerability CWE-79 due to a flaw in escaping process. According to the developer, this script was distributed from 26 November, 2003 to 9 July...
