CVE-2022-38652

A remote insecure deserialization vulnerability exixsts in VMWare Hyperic Agent 5.8.6. Exploitation of this vulnerability enables a malicious authenticated user to run arbitrary code or malware within a Hyperic Agent instance and its host operating system with the privileges of the Hyperic Agent...

Deserialization of untrusted data

UNSUPPORTED WHEN ASSIGNED A remote insecure deserialization vulnerability exixsts in VMWare Hyperic Agent 5.8.6. Exploitation of this vulnerability enables a malicious authenticated user to run arbitrary code or malware within a Hyperic Agent instance and its host operating system with the...

Authentication flaw

UNSUPPORTED WHEN ASSIGNED A security filter misconfiguration exists in VMware Hyperic Server 5.8.6. Exploitation of this vulnerability enables a malicious party to bypass some authentication requirements when issuing requests to Hyperic Server. NOTE: This vulnerability only affects products that...

PT-2022-24500 · Vmware · Vmware Hyperic Server

Name of the Vulnerable Software and Affected Versions: VMware Hyperic Server version 5.8.6 Description: A remote unauthenticated insecure deserialization vulnerability exists, enabling a malicious party to run arbitrary code or malware within Hyperic Server and the host operating system with the...

CVE-2022-38652

A remote insecure deserialization vulnerability exixsts in VMWare Hyperic Agent 5.8.6. Exploitation of this vulnerability enables a malicious authenticated user to run arbitrary code or malware within a Hyperic Agent instance and its host operating system with the privileges of the Hyperic Agent...

CVE-2022-38650

CVE-2022-38650 (VMware Hyperic Server 5.8.6) is a remote, unauthenticated insecure deserialization vulnerability in VMware Hyperic Server 5.8.6 that allows an attacker to execute arbitrary code with the Hyperic server process privileges (host OS level). Connected documents also note a related iss...

PT-2022-24502 · Vmware · Vmware Hyperic Agent

Name of the Vulnerable Software and Affected Versions: VMWare Hyperic Agent version 5.8.6 Description: A remote insecure deserialization issue exists, allowing a malicious authenticated user to execute arbitrary code or malware within a Hyperic Agent instance and its host operating system with th...

CVE-2022-38651

A security filter misconfiguration exists in VMware Hyperic Server 5.8.6. Exploitation of this vulnerability enables a malicious party to bypass some authentication requirements when issuing requests to Hyperic Server. NOTE: This vulnerability only affects products that are no longer supported by...

CVE-2022-38651

CVE-2022-38651 affects VMware Hyperic Server 5.8.6. A misconfigured security filter allows a malicious actor to bypass certain authentication requirements when issuing requests to Hyperic Server. The vulnerability has a CVSS v3.1 base score of 9.8 (CRITICAL) with network access, low attack comple...

CVE-2022-38651

A security filter misconfiguration exists in VMware Hyperic Server 5.8.6. Exploitation of this vulnerability enables a malicious party to bypass some authentication requirements when issuing requests to Hyperic Server. NOTE: This vulnerability only affects products that are no longer supported by...

VMWare Hyperic 代码问题漏洞

VMWare Hyperic is an application monitoring component of the Cloud Application Platform from VMWare, Inc. It enables IT professionals to manage the performance and availability of customized web applications in physical, virtual, and cloud environments. A code issue vulnerability exists in VMWare...

VMware Hyperic 安全漏洞

VMWare Hyperic is an application monitoring component of the Cloud Application Platform from VMWare, Inc. It enables IT professionals to manage the performance and availability of customized web applications in physical, virtual, and cloud environments. A security vulnerability exists in VMWare...

CVE-2022-38650

A remote unauthenticated insecure deserialization vulnerability exists in VMware Hyperic Server 5.8.6. Exploitation of this vulnerability enables a malicious party to run arbitrary code or malware within Hyperic Server and the host operating system with the privileges of the Hyperic server proces...

CVE-2022-38652

A remote insecure deserialization vulnerability exixsts in VMWare Hyperic Agent 5.8.6. Exploitation of this vulnerability enables a malicious authenticated user to run arbitrary code or malware within a Hyperic Agent instance and its host operating system with the privileges of the Hyperic Agent...

VMware Hyperic 代码问题漏洞

VMWare Hyperic is an application monitoring component of the Cloud Application Platform from VMWare, Inc. It enables IT professionals to manage the performance and availability of customized web applications in physical, virtual and cloud environments. A code issue vulnerability exists in VMware...

CVE-2022-38652

CVE-2022-38652 pertains to VMware Hyperic; remote insecure deserialization affects Hyperic Agent 5.8.6, allowing a malicious authenticated user to run code with Hyperic Agent privileges (often SYSTEM on Windows). Related CVE-2022-38650 affects VMware Hyperic Server 5.8.6 and is unauthenticated. R...

KLA10530 JRE update for multiple VMware products

Multiple VMware products were updated to address vulnerabilities in Oracle Java. For details look at KLA10447. Original advisories VMSA advisory KLA10447 Exploitation Public exploits exist for this vulnerability. Related products VMware-unclassified-products CVE list CVE-2014-6593 warning Solutio...

Hyperic HQ 3.2 - 4.2-beta1 - Multiple XSS

No description provided by source. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security Technologies - CoreLabs Advisory http://www.coresecurity.com/corelabs/ Hyperic HQ Multiple XSS 1. Advisory Information Title: Hyperic HQ Multiple XSS Advisory Id: CORE-2009-0812 Advisory URL:...

VMware Hyperic HQ Groovy Script-Console Java Execution

No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core'...

Multiple SpringSource Products Multiple HTML Injection Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/38913/info Multiple SpringSource Products are prone to multiple HTML-injection vulnerabilities because they fail to sufficiently sanitize user-supplied data. Attacker-supplied HTML or JavaScript code could run in the...