786 matches found
CVE-2016-7460
CVE-2016-7460 refers to an XML External Entity (XXE) vulnerability in the Single Sign-On feature of VMware products. Affects vCenter Server 5.5 before U3e and 6.0 before U2a, and vRealize Automation 6.x before 6.2.5. A specially crafted XML document containing an external entity declaration and a...
CVE-2016-7460
The Single Sign-On feature in VMware vCenter Server 5.5 before U3e and 6.0 before U2a and vRealize Automation 6.x before 6.2.5 allows remote attackers to read arbitrary files or cause a denial of service via an XML document containing an external entity declaration in conjunction with an entity...
CVE-2016-5334
CVE-2016-5334 affects VMware Identity Manager 2.x < 2.7.1 and vRealize Automation 7.x
CVE-2016-5334
VMware Identity Manager 2.x before 2.7.1 and vRealize Automation 7.x before 7.2.0 allow remote attackers to read /SAAS/WEB-INF and /SAAS/META-INF files via unspecified vectors...
CVE-2016-7457
CVE-2016-7457 affects VMware vRealize Operations (vROps) 6.x prior to 6.4.0. A privilege-escalation vulnerability could allow a remote authenticated vROps user (low-privileged) to gain full access to the application and potentially stop or delete virtual machines. The primary root cause is a priv...
XML External Entity Injection Vulnerability in Multiple VMware Products
VMware vCenter Server is a suite of server and virtualization management software from VMware, Inc. VMware vRealize Automation is a suite of cloud automation software from VMware, Inc. An XML external entity injection vulnerability exists in multiple VMware products and can be exploited by an...
VMware Identity Manager and vRealize Automation Information Disclosure Vulnerability
VMware Identity Manager and vRealize Automation are both VMware products. vMware Identity Manager is an Identity-as-a-Service IDaaS product that provides application provisioning, self-service catalogs, and Single Sign-On SSO for SaaS, Web, Cloud, and native mobile applications. vMware vRealize...
VMware vRealize Automation Partial Information Disclosure Vulnerability (VMSA-2016-0021)
There is a partial information disclosure vulnerability in VMware Identity Manager as used by vRealize Automation. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...
VMware vRealize Automation XML External Entity (XXE) Vulnerability (VMSA-2016-0022)
VMware vRealize Automation contain an XML External Entity XXE vulnerability in the Single Sign-On functionality. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...
VMware vRealize Operating Platform Remote Code Execution Vulnerability
VMware vRealize Operations is a set of policy-based, automated, intelligent IT operations and management software from VMware, Inc. A remote code execution vulnerability exists in the VMware vRealize Operations platform. An attacker could exploit the vulnerability to execute arbitrary code in the...
VMware Releases Security Update
VMware has released a security update to address a vulnerability in vRealize Operations. Exploitation of this vulnerability could allow an attacker to cause a denial-of-service condition. US-CERT encourages users and administrators to review VMware Security Advisory VMSA-2016-0020 and apply the...
VMware vRealize Operations REST API Deserialization Vulnerability (VMSA-2016-0020)
VMware vRealize Operations is prone to a deserialization vulnerability in its REST API implementation. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...
VMware vRealize Operations Privilege Escalation Vulnerability (VMSA-2016-0016)
VMware vRealize Operations is prone to a privilege escalation vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
VMSA-2016-0020:vRealize Operations update addresses REST API deserialization vulnerability
VMSA-2016-0020 vRealize Operations update addresses REST API deserialization vulnerability. VMware Security Advisory VMware Security Advisory Advisory ID: VMSA-2016-0020 VMware Security Advisory Severity: Important VMware Security Advisory Synopsis: vRealize Operations update addresses REST API...
VMware vRealize Operations Remote Elevation of Privilege Vulnerability
VMware vRealize Operations is a set of policy-based, automated, intelligent IT operations and management software from VMware, Inc. A remote elevation of privilege vulnerability exists in VMware vRealize Operations. A remote attacker could exploit this vulnerability to gain full control of an...
CVE-2016-5336
VMware vRealize Automation 7.0.x before 7.1 allows remote attackers to execute arbitrary code via unspecified vectors...
CVE-2016-5336
VMware vRealize Automation 7.0.x before 7.1 allows remote attackers to execute arbitrary code via unspecified vectors...
CVE-2016-5335
VMware Identity Manager 2.x before 2.7 and vRealize Automation 7.0.x before 7.1 allow local users to obtain root access via unspecified vectors...